sales@hackhalt.com

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total5
Critical0
High1
Medium3
Reset
Showing 1-5 of 5 records
Threat Entry Updated 2026-06-17

Piotnetforms - Remote Code Execution (CVE-2023-6220)

The Piotnet Forms plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'piotnetforms_ajax_form_builder' function in versions up to, and including, 1.0.28. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.

PLUGIN Piotnetforms

CVE-2023-6220

HIGH CVSS 8.1 2024-01-11