Tripetto

3 results · Clear filters · Feed

• Medium 4.3
  CVE-2025-1530

  Tripetto <= 8.0.9 - Cross-Site Request Forgery to Arbitrary Results Deletion

  The Tripetto plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 8.0.9. This is due to missing nonce validation. This makes it possible for unauthenticated attackers to delete arbitrary results via a forged r…

  Tripetto WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto Web / CMS
  Mar 15, 2025
• Medium 5.3
  CVE-2024-13829

  WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto <= 8.0.8 - Unauthenticated Sensitive Information Exposure

  The WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 8.0.8 via the 'attachments.php' file. This makes it possible for una…

  Tripetto WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto Web / CMS
  Feb 5, 2025
• Medium 4.7
  CVE-2021-36895

  WordPress Tripetto plugin <= 5.1.4 - Unauthenticated Cross-Site Scripting (XSS) vulnerability via SVG image upload

  Unauthenticated Cross-Site Scripting (XSS) vulnerability in Tripetto's Tripetto plugin <= 5.1.4 on WordPress via SVG image upload.

  Tripetto Tripetto (WordPress plugin) Web / CMS
  Apr 26, 2022