Piotnet Forms

Piotnet Forms has 8 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; 3 are fixed and 5 remain unpatched as of October 2026. Their average CVSS score is 6.3, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 2 high. 2025 was the busiest year with 4 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (38%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type, Cross-Site Request Forgery (CSRF).

3 of the records (38%) have a vendor fix, while 5 remain unpatched. The oldest unresolved one dates back to 2025.

8 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

6.3/ 10

Patch Coverage38%

Open

Fixed

Get automatic notifications for all Piotnet Forms vulnerabilities before they are exploited.

Most severe open issueCVSS 7.2CVE-2026-96227

Piotnet Forms <= 1.0.30 - Unauthenticated Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

8 records


2026-10-09 00:00	Piotnet Forms <= 1.0.30 - Unauthenticated Stored Cross-Site Scripting Piotnet Forms <= 1.0.30	`CVE-2026-96227`	7.2 High	Claude Ndanda	No
2025-09-22 00:00	Piotnet Forms <= 1.0.30 - Cross-Site Request Forgery Piotnet Forms <= 1.0.30	`CVE-2025-57933`	4.3 Medium	Bao - BlueRock	No
2025-04-07 00:00	Piotnet Forms <= 1.0.30 - Authenticated (Editor+) Path Traversal Piotnet Forms <= 1.0.30	`CVE-2025-32205`	3.8 Low	Trương Hữu Phúc (truonghuuphuc)	No
2025-04-01 00:00	Piotnet Forms <= 1.0.30 - Authenticated (Editor+) Stored Cross-Site Scripting Piotnet Forms <= 1.0.30	`CVE-2025-31793`	4.4 Medium	Thái An	No
2025-04-01 00:00	Piotnet Forms <= 1.0.30 - Authenticated (Author+) Stored Cross-Site Scripting Piotnet Forms <= 1.0.30	`CVE-2025-31792`	6.4 Medium	Michael	No
2023-12-27 00:00	Piotnet Forms Plugin <= 1.0.28 - Unauthenticated Arbitrary File Upload Piotnet Forms <= 1.0.28	`CVE-2023-51412`	9.8 Critical	Rafie Muhammad	Yes
2023-12-27 00:00	Piotnet Forms <= 1.0.25 - Missing Authorization via multiple AJAX actions Piotnet Forms <= 1.0.29	`CVE-2023-51413`	6.5 Medium	Abdi Pranata	Yes
2023-12-04 00:00	Piotnet Forms <= 1.0.28 - Unauthenticated Arbitrary File Upload Piotnet Forms <= 1.0.28	`CVE-2023-6220`	8.1 High	István Márton	Yes

Showing 1–8 of 8 reports