Piotnet Forms
Avoid: Piotnet Forms is closed on wordpress.org and no longer gets updates.
Capped at 10 because the plugin is closed.
| Ownership | 100 |
|---|---|
| Maintenance | 10 |
| Security | 10 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- CriticalSEC-2Vulnerability published 9 Oct 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.23 Oct 2026Evidence
- CriticalSEC-2Vulnerability published 22 Sep 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.6 Oct 2025Evidence
- CriticalSEC-2Vulnerability published 7 Apr 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.21 Apr 2025Evidence
- CriticalSEC-2Vulnerability published 1 Apr 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.15 Apr 2025Evidence
- CriticalSEC-2Vulnerability published 1 Apr 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.15 Apr 2025Evidence
- WarningCLS-1Closed on wordpress.org on 6 Oct 2026, reason: false. Replace this plugin. It no longer receives updates from wordpress.org.6 Oct 2026Evidence
- InfoSEC-35 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
Commit history is collected for plugins with 1,000+ installs or on a watchlist. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- not recorded
- Releases, 24 months
- 0
- Tested up to
- not stated vs 7.1
- Requires PHP
- not stated supported 8.2+
Release history builds as we see new versions.
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 9 Oct 2026 | Piotnet Forms <= 1.0.30 - Unauthenticated Stored Cross-Site Scripting | 7.2 | <= 1.0.30 | No fix | n/a |
| 22 Sep 2025 | Piotnet Forms <= 1.0.30 - Cross-Site Request Forgery | 4.3 | <= 1.0.30 | No fix | n/a |
| 7 Apr 2025 | Piotnet Forms <= 1.0.30 - Authenticated (Editor+) Path Traversal | 3.8 | <= 1.0.30 | No fix | n/a |
| 1 Apr 2025 | Piotnet Forms <= 1.0.30 - Authenticated (Author+) Stored Cross-Site Scripting | 6.4 | <= 1.0.30 | No fix | n/a |
| 1 Apr 2025 | Piotnet Forms <= 1.0.30 - Authenticated (Editor+) Stored Cross-Site Scripting | 4.4 | <= 1.0.30 | No fix | n/a |
| 27 Dec 2023 | Piotnet Forms <= 1.0.25 - Missing Authorization via multiple AJAX actions | 6.5 | <= 1.0.29 | 1.0.30 | n/a |
| 27 Dec 2023 | Piotnet Forms Plugin <= 1.0.28 - Unauthenticated Arbitrary File Upload | 9.8 | <= 1.0.28 | 1.0.29 | n/a |
| 4 Dec 2023 | Piotnet Forms <= 1.0.28 - Unauthenticated Arbitrary File Upload | 8.1 | <= 1.0.28 | 1.0.29 | n/a |
Source: Wordfence Intelligence.
Reputation
No ratings yet.
Momentum
Fewer than 10 active installs. History builds with each weekly snapshot.
Momentum history builds with each snapshot.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
No healthier plugin in the same category yet.
Facts
| Version | not stated |
|---|---|
| Author | not stated |
| Added | not stated |
| Last updated | not stated |
| Active installs | Fewer than 10 |
| Requires WordPress | not stated |
| Tested up to | not stated |
| Requires PHP | not stated |
| Category | Forms & Data Collection > Form Builders & Creators |
| Tags | not stated |
Questions
Is Piotnet Forms still maintained?
No. Piotnet Forms was closed on wordpress.org on 6 Oct 2026 (false) and gets no updates there.
Is Piotnet Forms safe?
Piotnet Forms has 5 published vulnerabilities with no patched version. Its Canary status is Avoid.
Who owns Piotnet Forms?
The wordpress.org author is not listed. We have recorded no ownership change.
What can I use instead of Piotnet Forms?
We have no healthier plugin in the same category on record yet.