CVE Feed

Dashboard / CVE / CVE-2023-51412

CVE-2023-51412

Unrestricted Upload of File with Dangerous Type vulnerability in Piotnet Piotnet Forms.This issue affects Piotnet Forms: from n/a through 1.0.25.

Published:Dec 29, 2023

Last Modified:Apr 28, 2026

EPS:Dec 29, 2023

EPSS Score:0.00655

CVSS Score:9

Affected Products

Vendor

Product

Action

Vendor

Piotnet

Product

Piotnet Forms

Piotnet

Piotnet Forms

Exploits

No exploit reference

Common Weakness Enumeration

CWE-434 Unrestricted Upload of File with Dangerous Type

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs

Related CVEs

CVE-2026-4883 (CVSS 9.8) — The Piotnet Forms plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validat…

CVE-2025-57933 (CVSS 4.3) — Cross-Site Request Forgery (CSRF) vulnerability in piotnetdotcom Piotnet Forms piotnetforms allows Cross Site …

CVE-2024-33634 (CVSS 5.4) — Server-Side Request Forgery (SSRF) vulnerability in Piotnet Piotnet Addons For Elementor Pro.This issue affect…

CVE-2024-33633 (CVSS 7.1) — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Piotnet …

CVE-2023-6220 (CVSS 8.1) — The Piotnet Forms plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type v…

References

https://patchstack.com/database/vulnerability/piotnetforms/wordpress-piotnetforms-plugin-1-0-25-unauthenticated-arbitrary-file-upload-vulnerability?_s_id=cve

https://patchstack.com/database/vulnerability/piotnetforms/wordpress-piotnetforms-plugin-1-0-25-unauthenticated-arbitrary-file-upload-vulnerability?_s_id=cve

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High