CVE-2026-96227 - Piotnet Forms <= 1.0.30 - Unauthenticated Stored XSS via File Upload
CVE ID :CVE-2026-96227 Published : Oct. 11, 2026, 7:17 a.m. | 6 hours, 13 minutes ago Description :The Piotnet Forms WordPress plugin through 1.0.30 does not authenticate or validate a form-submission file-upload request and permits browser-renderable file types to be stored, allowing...