Piotnet

10 CVEs across 5 Piotnet products. Browse Piotnet vulnerabilities, severities, and proof-of-concept exploits.

Piotnet products with known CVEs

ProductCVEs
Piotnet Addons For Elementor Pro6
Piotnet Addons For Elementor2
Piotnet Forms2
Piotnet Forms2
Piotnet Addons1
Piotnet CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-4883Critical9.82026-05-19The Piotnet Forms plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the 'piotnetforms_ajax_form_builder' funct…
CVE-2026-4885Critical9.82026-05-19The Piotnet Addons for Elementor Pro plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the 'pafe_ajax_form_bui…
CVE-2024-5502Medium6.42024-08-23The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Accordion, Dual Heading, and Vertical…
CVE-2024-33635High7.52024-04-29Missing Authorization vulnerability in Piotnet Piotnet Addons For Elementor Pro.This issue affects Piotnet Addons For Elementor Pro: from n/a through 7.1.17.
CVE-2024-33634Medium5.42024-04-29Server-Side Request Forgery (SSRF) vulnerability in Piotnet Piotnet Addons For Elementor Pro.This issue affects Piotnet Addons For Elementor Pro: from n/a thro…
CVE-2024-33632Medium5.42024-04-29Cross-Site Request Forgery (CSRF) vulnerability in Piotnet Piotnet Addons For Elementor Pro.This issue affects Piotnet Addons For Elementor Pro: from n/a throu…
CVE-2024-33631Medium6.52024-04-29Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Piotnet Piotnet Addons For Elementor Pro allows Stored XS…
CVE-2024-33630Medium6.52024-04-29Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Piotnet Piotnet Addons For Elementor allows Stored XSS.Th…
CVE-2024-33633High7.12024-04-29Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Piotnet Piotnet Addons For Elementor Pro allows Reflected…
CVE-2024-29934Medium6.52024-03-27Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Piotnet Piotnet Addons For Elementor allows Stored XSS.Th…
CVE-2023-6220High8.12024-01-11The Piotnet Forms plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'piotnetforms_ajax_form_builder'…
CVE-2023-51412Critical9.02023-12-29Unrestricted Upload of File with Dangerous Type vulnerability in Piotnet Piotnet Forms.This issue affects Piotnet Forms: from n/a through 1.0.25.