SecAlerts
p

piotnet

Security Risk Profile

78
/100
high

Security Risk Score

Comprehensive risk assessment based on 18 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from December 29, 2023 to present

18
Total CVEs
7
Critical+High
0
Exploited
7
Unpatched

Threat Assessment

Avg CVSS
7.1
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
7
Critical/High
Risk Level
78/100
high
🆕 1Fresh (<7d)📈 1 in Last 30 Days

Severity Distribution

Critical
4
High
3
Medium
11
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
11

Age Distribution

Common Weaknesses (CWE)

1
XSS
9
2
Malicious File Upload
3
3
Infoleak
1
4
SSRF
1
5
CSRF
1

Most Affected Products

1. Piotnet Piotnet Addons For Elementor Pro5
2. Piotnet Addons For Elementor4
3. Piotnet Piotnet Addons For Elementor3
4. Piotnet Piotnet Forms2
5. Piotnet Piotnet Forms Wordpress2

Recent Vulnerabilities

See more →
CVE-2026-96227
CVSS 8.8high

Piotnet Forms <= 1.0.30 - Unauthenticated Stored XSS via File Upload

Oct 11, 2026🔧 No Patch
CVE-2026-4883
CVSS 9.8critical

Piotnet Forms <= 2.1.40 - Unauthenticated Arbitrary File Upload via Form File Upload

May 19, 2026🔧 No Patch
CVE-2024-13650
CVSS 6.4medium

Piotnet Addons For Elementor <= 2.4.36 - Authenticated (Contributor+) Stored Cross-Site Scripting

Apr 18, 2025🔧 No Patch
CVE-2024-10775
CVSS 4.3medium

Piotnet Addons For Elementor <= 2.4.32 - Authenticated (Contributor+) Post Disclosure

Jan 15, 2025🔧 No Patch
CVE-2024-5502
CVSS 6.4medium

Piotnet Addons For Elementor <= 2.4.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

Aug 23, 2024
CVE-2024-5614
CVSS 5.3EPSS 0%medium

Piotnet Addons For Elementor <= 2.4.29 - Unauthenticated Sensitive Information Exposure

Jul 27, 2024🔧 No Patch
CVE-2023-51413
CVSS 5.3medium

WordPress Piotnet Forms plugin <= 1.0.29 - Broken Access Control vulnerability

Jun 12, 2024
CVE-2024-4262
CVSS 6.4EPSS 0%medium

Piotnet Addons For Elementor <= 2.4.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widget Attributes

May 22, 2024🔧 No Patch
CVE-2024-4432
CVSS 6.4EPSS 0%medium

Piotnet Addons For Elementor <= 2.4.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

May 18, 2024🔧 No Patch
CVE-2024-33635
CVSS 7.5EPSS 0%high

WordPress Piotnet Addons For Elementor Pro plugin <= 7.1.17 - Unauthenticated Arbitrary Post/Page Deletion vulnerability

Apr 29, 2024🔧 No Patch

Monitor piotnet in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.