Vulnerabilities

TI-2026-22531 CVE-2026-28192 · GHSA-f29r-mh79-f49q

WordPress Piotnet Addons For Elementor Pro plugin <= 7.1.67 - Arbitrary File Upload vulnerability

MEDIUM 43

Unauthenticated Arbitrary File Upload in Piotnet Addons For Elementor Pro <= 7.1.67 versions.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00427 Published 2026-08-18 No fix listed CWE-434

TI-2026-04257 CVE-2026-4883 · GHSA-rpxv-q36f-v8r2

Piotnet Forms <= 2.1.40 - Unauthenticated Arbitrary File Upload via Form File Upload

MEDIUM 54

The Piotnet Forms plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the 'piotnetforms_ajax_form_builder' function in all versions up to, and including, 2.1.40.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03063 Published 2026-05-19 No fix listed CWE-434

TI-2026-04258 CVE-2026-4885 · GHSA-gjqr-fmw5-p2v4

Piotnet Addons for Elementor Pro <= 7.1.70 - Unauthenticated Arbitrary File Upload via Form File Upload

MEDIUM 51

The Piotnet Addons for Elementor Pro plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the 'pafe_ajax_form_builder' function in all versions up to, and including, 7.1.70.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00953 Published 2026-05-19 No fix listed CWE-434

TI-2024-05113 CVE-2024-5502 · GHSA-864x-rm29-vj33

Piotnet Addons For Elementor <= 2.4.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

LOW 28

The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Accordion, Dual Heading, and Vertical Timeline widgets in all versions up to, and including, 2.4.3…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00321 Published 2024-08-23 No fix listed CWE-79

TI-2024-22219 CVE-2024-33635 · GHSA-x7gc-r4xg-v7c2

WordPress Piotnet Addons For Elementor Pro plugin <= 7.1.17 - Unauthenticated Arbitrary Post/Page Deletion vulnerability

MEDIUM 40

Missing Authorization vulnerability in Piotnet Piotnet Addons For Elementor Pro.This issue affects Piotnet Addons For Elementor Pro: from n/a through 7.1.17.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00561 Published 2024-04-29 No fix listed CWE-862

TI-2024-22218 CVE-2024-33634 · GHSA-gr5j-xcqm-p2ph

Server-side request forgery in Piotnet Addons For Elementor Pro

LOW 24

Server-Side Request Forgery (SSRF) vulnerability in Piotnet Piotnet Addons For Elementor Pro.This issue affects Piotnet Addons For Elementor Pro: from n/a through 7.1.17.

CVSS 3.1MEDIUM 5.4 Network No auth No interaction EPSS 0.00287 Published 2024-04-29 No fix listed CWE-918

TI-2024-22216 CVE-2024-33632 · GHSA-q2pw-g7vq-q2cm

WordPress Piotnet Addons For Elementor Pro plugin <= 7.1.17 - Cross Site Request Forgery (CSRF) vulnerability

LOW 24

Cross-Site Request Forgery (CSRF) vulnerability in Piotnet Piotnet Addons For Elementor Pro.This issue affects Piotnet Addons For Elementor Pro: from n/a through 7.1.17.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00209 Published 2024-04-29 No fix listed CWE-352

TI-2024-22214 CVE-2024-33630 · GHSA-2h9f-ppj9-gcvv

WordPress Piotnet Addons For Elementor plugin <= 2.4.26 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Piotnet Piotnet Addons For Elementor allows Stored XSS.This issue affects Piotnet Addons For Elementor: from n/a throu…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00339 Published 2024-04-29 No fix listed CWE-79

TI-2024-22215 CVE-2024-33631 · GHSA-xmpc-wq83-gmwh

Cross-site scripting in Piotnet Addons For Elementor Pro

MEDIUM 42

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Piotnet Piotnet Addons For Elementor Pro allows Stored XSS.This issue affects Piotnet Addons For Elementor Pro: from n…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00438 Published 2024-04-29 No fix listed CWE-79

TI-2024-22217 CVE-2024-33633 · GHSA-jc65-rh6v-pv5p

WordPress Piotnet Addons For Elementor Pro plugin <= 7.1.17 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Piotnet Piotnet Addons For Elementor Pro allows Reflected XSS.This issue affects Piotnet Addons For Elementor Pro: fro…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00354 Published 2024-04-29 No fix listed CWE-79

TI-2024-19701 CVE-2024-29934 · GHSA-7mr5-vq55-2cv2

WordPress Piotnet Addons For Elementor plugin <= 2.4.25 - Cross Site Scripting (XSS) vulnerability

LOW 29

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00364 Published 2024-03-27 No fix listed CWE-79

TI-2023-05713 CVE-2023-6220 · GHSA-wfm7-x67v-8f9v

Piotnet Forms <= 1.0.28 - Unauthenticated Arbitrary File Upload

MEDIUM 46

The Piotnet Forms plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'piotnetforms_ajax_form_builder' function in versions up to, and including, 1.0.28.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01391 Published 2024-01-11 No fix listed CWE-434

TI-2023-28066 CVE-2023-51412 · GHSA-m9hr-h59x-fqmj

WordPress Piotnet Forms Plugin <= 1.0.25 is vulnerable to Arbitrary File Upload

MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in Piotnet Piotnet Forms.This issue affects Piotnet Forms: from n/a through 1.0.25.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00537 Published 2023-12-29 No fix listed CWE-434

Vulnerabilities

Filters