Piotnet vulnerabilities
We track 4 vulnerabilities in Piotnet products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on May 19, 2026.
Latest Piotnet vulnerabilities
- 9.8 Critical severity
Piotnet Forms: Unrestricted Upload of File with Dangerous Type
The Piotnet Forms plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the 'piotnetforms_ajax_form_builder' function in all versions up to, and including, 2.1.40. The plugin uses an incomplete extension blacklist t
- 9.8 Critical severity
Piotnet Addons For Elementor Pro: Unrestricted Upload of File with Dangerous Type
The Piotnet Addons for Elementor Pro plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the 'pafe_ajax_form_builder' function in all versions up to, and including, 7.1.70. The plugin uses an incomplete extension
- 7.5 High severity
Piotnet Addons For Elementor Pro: Missing Authorization
Missing Authorization vulnerability in Piotnet Piotnet Addons For Elementor Pro.This issue affects Piotnet Addons For Elementor Pro: from n/a through 7.1.17.
- 7.1 High severity
Piotnet Addons For Elementor Pro: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Piotnet Piotnet Addons For Elementor Pro allows Reflected XSS.This issue affects Piotnet Addons For Elementor Pro: from n/a through 7.1.17.