CVE-2023-51412 - WordPress Piotnet Forms Plugin <= 1.0.25 is vulnerable to Arbitrary File Upload

Back Back to CVE browser

CRITICAL

WordPress Piotnet Forms Plugin <= 1.0.25 is vulnerable to Arbitrary File Upload

Published Dec 29, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 0.54%

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Piotnet Piotnet Forms.This issue affects Piotnet Forms: from n/a through 1.0.25.

Affected products

Vendor Piotnet Product Piotnet Forms Default
unaffected
- Version
  -
  Status
  affected
  Constraints
  <=1.0.25

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Piotnet

Piotnet Forms

unaffected

Version	Status	Constraints
-	affected	<=1.0.25

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-434

Unrestricted Upload of File

References (1)

https://patchstack.com/database/vulnerability/piotnetforms/wordpress-piotnetforms-plugin-1-0-25-unauthenticated-arbitrary-file-upload-vulnerability?_s_id=cve
vdb-entryThird Party Advisory

Link	Providers	Tags
https://patchstack.com/database/vulnerability/piotnetforms/wordpress-piotnetforms-plugin-1-0-25-unauthenticated-arbitrary-file-upload-vulnerability?_s_id=cve		vdb-entryThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Patchstack

Published Dec 29, 2023

Updated Apr 28, 2026

Reserved Dec 18, 2023

Link CVE-2023-51412

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-51412

Red Hat

Severity n/a

Public date n/a

Links CVE-2023-51412