Skip to content
OpenAdvisories

Product · Piotnet

Piotnet Forms

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-4883 Public exploit Scanner template

    Piotnet Forms <= 2.1.40 - Unauthenticated Arbitrary File Upload via Form File Upload

    The Piotnet Forms plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the 'piotnetforms_ajax_form_builder' function in all versions up to, and including, 2.1.40. The plugin uses an incomplete extension blacklist …

    Piotnet Piotnet Forms Web / CMS
  • Critical 9.0
    CVE-2023-51412

    WordPress Piotnet Forms Plugin <= 1.0.25 is vulnerable to Arbitrary File Upload

    Unrestricted Upload of File with Dangerous Type vulnerability in Piotnet Piotnet Forms.This issue affects Piotnet Forms: from n/a through 1.0.25.

    Piotnet Piotnet Forms