CVE-2022-1569

MEDIUM 4.8CVE-2022-1569 · Published 08/06/2022 · updated 17/06/2026

In short

CVE-2022-1569 is a MEDIUM (CVSS 4.8) vulnerability affecting drag & drop builder (pieforms).
Chance of exploitation in the next 30 days (EPSS): 0.60%, higher than 48.8% of all vulnerabilities.
Fix: update to 1.4.9.4 or later.

Package	Affected versions	Patched versions
drag & drop builder pieforms	`< 1.4.9.4`	`1.4.9.4`

Description

The Drag & Drop Builder, Human Face Detector, Pre-built Templates, Spam Protection, User Email Notifications & more! WordPress plugin before 1.4.9.4 does not sanitise and escape some of its form fields, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks when unfiltered_html is disallowed

References

wpscan.com/vulnerability/5a2756c1-9abf-4fd6-8ce2-9f840514dfcc · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free