Tripetto
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto | 5 | – | Mar 15, 2025 |
| Tripetto (WordPress plugin) | 1 | – | Apr 26, 2022 |
Exploited and recent CVEs
- CVE-2025-1530 Tripetto <= 8.0.9 - Cross-Site Request Forgery to Arbitrary Results Deletion 0.2%
- CVE-2024-13497 WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto <= 8.0.9 - Unauthenticated Stored Cross-Site Scripting 0.3%
- CVE-2024-13829 WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto <= 8.0.8 - Unauthenticated Sensitive Information Exposure 0.4%
- CVE-2025-22295 WordPress Tripetto plugin <= 8.0.6 - Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2024-10260 Tripetto <= 8.0.11 - Unauthentiated Stored Cross-Site Scripting via Form File Upload 0.4%
- CVE-2021-36895 WordPress Tripetto plugin <= 5.1.4 - Unauthenticated Cross-Site Scripting (XSS) vulnerability via SVG image upload 0.8%