VYPR

Piotnet Forms

by Piotnet

CVEs (2)

  • CVE-2023-51412CriDec 29, 2023
    risk 0.59cvss 9.0epss 0.01

    Unrestricted Upload of File with Dangerous Type vulnerability in Piotnet Piotnet Forms.This issue affects Piotnet Forms: from n/a through 1.0.25.

  • CVE-2023-6220HigJan 11, 2024
    risk 0.53cvss 8.1epss 0.01

    The Piotnet Forms plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'piotnetforms_ajax_form_builder' function in versions up to, and including, 1.0.28. This makes it possible for unauthenticated attackers to upload…