Skip to content
OpenAdvisories

Vendor

Piotnet

11 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-4883 Public exploit

    Piotnet Forms <= 2.1.40 - Unauthenticated Arbitrary File Upload via Form File Upload

    The Piotnet Forms plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the 'piotnetforms_ajax_form_builder' function in all versions up to, and including, 2.1.40. The plugin uses an incomplete extension blacklist …

  • Critical 9.8
    CVE-2026-4885 Public exploit

    Piotnet Addons for Elementor Pro <= 7.1.70 - Unauthenticated Arbitrary File Upload via Form File Upload

    The Piotnet Addons for Elementor Pro plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the 'pafe_ajax_form_builder' function in all versions up to, and including, 7.1.70. The plugin uses an incomplete extension…