Piotnet Forms Path Traversal Vulnerability

A path traversal vulnerability has been identified in the Piotnet Forms WordPress plugin, affecting versions through 1.0.30. This vulnerability allows for improper limitation of a pathname, potentially leading to unauthorized access to restricted directories.

Impact

Exploitation of this vulnerability allows for path traversal, which could lead to unauthorized file access on the server.

Remediation

Users are advised to update to a version of the Piotnet Forms plugin that is later than 1.0.30. For those unable to update, Patchstack has issued a virtual patch that can be applied.