How can n8n be used to detect or work with legitimate PDF upload forms on external WordPress websites?

Questions
1

I’m exploring whether n8n can be used to automate workflows that interact with publicly available PDF upload forms on WordPress websites (for example, forms created with plugins like WPForms, Gravity Forms, or custom upload endpoints).

The use case is strictly limited to:

  • Public or user-permitted upload forms

  • Websites where uploads are explicitly allowed

  • Educational or internal testing scenarios

I’m trying to understand:

  • How to identify legitimate upload form endpoints or webhooks

  • Whether n8n can safely listen for or submit files to such endpoints

  • Recommended n8n nodes (HTTP Request, Webhook, etc.) for handling PDF uploads

  • Best practices to avoid violating site security or terms of service

I’m not looking to bypass authentication or upload files without permission — only to work with upload flows that are intentionally exposed.

Any examples, workflows, or documentation references would be very helpful.

1 Like
3

so the basic approach would be to inspect the wordpress form (right click → inspect element) to find the form’s action URL and field names, then use the HTTP Request node in n8n to POST to that endpoint with the PDF as binary data.

you’d set the node to POST, add the file from a previous step (like Read Binary File or a Webhook trigger), and match the form field names exactly - most wp forms use something like `file` or `upload_field`. here’s a starting point:

```javascript

// In HTTP Request node:

// Method: POST

// URL: Login | HSTS Redirection Community (or the form action URL)

// Body Content Type: Multipart Form Data

// Add field: name=“your_file_field”, value={{$binary.data}} (from previous node)

```

check the network tab in browser devtools when you manually submit the form to see what headers/fields are required - some forms need nonce tokens or specific action params. if the site has rate limiting or captcha you might hit issues, and obviously only do this on sites where you have permission to automate uploads.

docs on binary data: Binary data | n8n Docs

lmk if you need help with a specific form structure