tripetto

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

tripetto records in CISA KEV

No tripetto vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Tripetto 4 records LOW

Records

4 records in Tripetto · all components

TI-2024-12538 CVE-2024-13497 · GHSA-9p48-8gpf-wwmc

Cross-site scripting in tripetto WordPress form builder plugin for contact forms, surveys…

LOW 38

The WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto plugin for WordPress is vulnerable to Stored Cross-Site Scripting via attachment uploads in all versions up to, and including, 8.0.9 due…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.0032 Published 2025-03-15 No fix listed CWE-80

TI-2024-09506 CVE-2024-10260 · GHSA-w8ph-8p95-6q78

Tripetto <= 8.0.11 - Unauthentiated Stored Cross-Site Scripting via Form File Upload

LOW 38

The Tripetto plugin for WordPress is vulnerable to Stored Cross-Site Scripting via File uploads in all versions up to, and including, 8.0.11 due to insufficient input sanitization and output escaping.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00374 Published 2024-11-15 No fix listed CWE-79

TI-2021-14982 CVE-2021-36895 · GHSA-f27m-q7gr-7676

WordPress Tripetto plugin <= 5.1.4 - Unauthenticated Cross-Site Scripting (XSS) vulnerability via SVG image upload

LOW 29

Unauthenticated Cross-Site Scripting (XSS) vulnerability in Tripetto's Tripetto plugin <= 5.1.4 on WordPress via SVG image upload.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00757 Published 2022-04-26 No fix listed CWE-79

TI-2025-01317 CVE-2025-1530 · GHSA-q44p-8prh-c6rh

Tripetto <= 8.0.9 - Cross-Site Request Forgery to Arbitrary Results Deletion

LOW 19

The Tripetto plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 8.0.9.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00194 Published 2025-03-15 No fix listed CWE-352

Open these records in search →

Critical	0
High	3
Medium	5
Low	0
No CVSS	0