Piotnet

Records13All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Piotnet records in CISA KEV

No Piotnet vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Piotnet Forms 2 records MEDIUM Piotnet Addons 1 record LOW

Records

2 records in Piotnet Forms · all components

TI-2023-05713 CVE-2023-6220 · GHSA-wfm7-x67v-8f9v

Piotnet Forms <= 1.0.28 - Unauthenticated Arbitrary File Upload

MEDIUM 46

The Piotnet Forms plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'piotnetforms_ajax_form_builder' function in versions up to, and including, 1.0.28.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01391 Published 2024-01-11 No fix listed CWE-434

TI-2023-28066 CVE-2023-51412 · GHSA-m9hr-h59x-fqmj

WordPress Piotnet Forms Plugin <= 1.0.25 is vulnerable to Arbitrary File Upload

MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in Piotnet Piotnet Forms.This issue affects Piotnet Forms: from n/a through 1.0.25.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00537 Published 2023-12-29 No fix listed CWE-434

Open these records in search →

Critical	6
High	2
Medium	5
Low	0
No CVSS	0