10web vulnerabilities

Products

• Photo Gallery 49
• Form Maker 24
• Form Maker By 10web – Mobile-friendly Drag & Drop Contact Form Builder 23
• Photo Gallery By 10web – Mobile-friendly Image Gallery 23
• Photo Gallery By 10web 19
• Slider 9
• Booster – Website Speed Optimization, Cache & Page Speed Optimizer 5
• Photogallery 5
• Slider By 10web 5
• Map Builder For Google Maps 4
• Map Builder For Google Maps 4
• Form Maker By 10web 3
• 10webanalytics 2
• Booster 2
• Social Photo Feed 2
• Social Post Feed 2
• Social Post Feed 2
• Image Optimizer 2
• Seo 2
• Wps Telegram Chat 2

Newest

• 10web social photo feed, unknown 10web social photo feed +1 more WordPress 10Web Social Photo Feed plugin <= 1.5.6 - PHP Object Injection vulnerability CVE-2026-118081 8.8 HighOctober 29, 2026
• 10web booster – website speed optimization, cache & page speed optimizer 10Web Booster <= 2.34.5 - Unauthenticated Limited File Write / Cache Poisoning via Query-string Parameter Traversal in Page-Cache Path CVE-2026-103896 7.5 HighOctober 16, 2026
• 10web photo gallery by 10web – mobile-friendly image gallery Photo Gallery by 10Web <= 1.8.42 - Reflected Cross-Site Scripting via 'title' Parameter CVE-2026-18557 6.1 MediumOctober 15, 2026
• 10web booster – website speed optimization, cache & page speed optimizer 10Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' Parameter CVE-2026-108587 9.8 CriticalOctober 15, 2026
• 10web form maker by 10web – mobile-friendly drag & drop contact form builder Form Maker by 10Web <= 1.15.48 - Unauthenticated SQL Injection via 'inputs' Parameter CVE-2026-95808 7.5 HighOctober 14, 2026
• 10web photo gallery by 10web WordPress Photo Gallery by 10Web plugin <= 1.8.47 - Cross Site Scripting (XSS) vulnerability CVE-2026-42715 7.1 HighOctober 10, 2026
• 10web slider by 10web WordPress Slider by 10Web plugin <= 1.2.63 - Cross Site Scripting (XSS) vulnerability CVE-2026-42711 7.1 HighOctober 10, 2026
• 10web slider by 10web WordPress Slider by 10Web plugin <= 1.2.62 - PHP Object Injection vulnerability CVE-2026-105885 8.8 HighOctober 10, 2026
• 10web booster – website speed optimization, cache & page speed optimizer 10Web Booster <= 2.34.8 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name CVE-2026-107742 7.2 HighOctober 10, 2026
• 10web form maker by 10web – mobile-friendly drag & drop contact form builder Form Maker by 10Web <= 1.15.48 - Reflected Cross-Site Scripting via 'inputs' Parameter Array Key CVE-2026-103998 6.1 MediumOctober 10, 2026
• 10web slider by 10web WordPress Slider by 10Web plugin <= 1.2.63 - SQL Injection vulnerability CVE-2026-42710 7.6 HighOctober 7, 2026
• 10web social photo feed, unknown 10web social photo feed +1 more WordPress 10Web Social Photo Feed plugin <= 1.4.35 - Broken Access Control vulnerability CVE-2026-39787 6.5 MediumOctober 6, 2026
• 10web photo gallery by 10web – mobile-friendly image gallery Photo Gallery by 10Web <= 1.8.46 - Reflected Cross-Site Scripting via 'thumb_url' Parameter CVE-2026-92974 6.1 MediumOctober 3, 2026
• 10web form maker by 10web – mobile-friendly drag & drop contact form builder Form Maker by 10Web <= 1.15.47 - Unauthenticated Stored Cross-Site Scripting via Mark on Map Longitude/Latitude Fields CVE-2026-96813 7.2 HighOctober 1, 2026
• 10web photo gallery by 10web WordPress Photo Gallery by 10Web plugin <= 1.8.46 - PHP Object Injection vulnerability CVE-2026-102377 8.8 HighSeptember 30, 2026
• 10web booster – website speed optimization, cache & page speed optimizer WordPress 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin <= 2.33.6 - PHP Object Injection vulnerability CVE-2026-94121 8.8 HighSeptember 30, 2026
• 10web photo gallery by 10web – mobile-friendly image gallery Photo Gallery by 10Web <= 1.8.44 - Authenticated (Author+) SQL Injection via 'album_id' Shortcode Attribute CVE-2026-85652 6.5 MediumSeptember 18, 2026
• 10web photo gallery by 10web – mobile-friendly image gallery Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.44 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes CVE-2026-86311 6.4 MediumSeptember 17, 2026
• 10web form maker by 10web – mobile-friendly drag & drop contact form builder Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.46 - Reflected Cross-Site Scripting CVE-2026-85645 6.1 MediumSeptember 10, 2026
• 10web photo gallery by 10web Photo Gallery by 10Web < 1.8.44 - Reflected XSS via title and paged Parameters CVE-2026-12865 7.1 HighSeptember 2, 2026
• 10web form maker by 10web WordPress Form Maker by 10Web plugin <= 1.15.49 - Cross Site Scripting (XSS) vulnerability CVE-2026-66616 7.1 HighAugust 20, 2026
• 10web slider by 10web WordPress Slider by 10Web plugin <= 1.2.63 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-66635 7.4 HighAugust 18, 2026
• 10web form maker by 10web – mobile-friendly drag & drop contact form builder Form Maker by 10Web <= 1.15.44 - Authenticated (Subscriber+) SQL Injection via '{username}' Placeholder in Dynamic-Choice Field WHERE Clause CVE-2026-15993 5.3 MediumAugust 15, 2026
• 10web form maker by 10web – mobile-friendly drag & drop contact form builder Form Maker by 10Web <= 1.15.43 - Authenticated (Adminsitrator+) SQL Injection via 'groupids' Parameter CVE-2026-11776 4.9 MediumJune 18, 2026
• 10web form maker by 10web – mobile-friendly drag & drop contact form builder Form Maker by 10Web <= 1.15.43 - Authenticated (Administrator+) SQL Injection via 'name' Parameter CVE-2026-11777 4.9 MediumJune 18, 2026
• 10web form maker by 10web WordPress Form Maker by 10Web plugin <= 1.15.38 - SQL Injection vulnerability CVE-2026-39502 9.3 CriticalJune 15, 2026
• 10web photo gallery by 10web – mobile-friendly image gallery Photo Gallery by 10Web <= 1.8.41 - Authenticated (Contributor+) SQL Injection via 'compact_album_order_by' Shortcode Parameter CVE-2026-9829 6.5 MediumJune 6, 2026
• 10web photo gallery by 10web WordPress Photo Gallery by 10Web plugin <= 1.8.41 - SQL Injection vulnerability CVE-2026-49771 7.6 HighJune 4, 2026
• 10web photo gallery by 10web – mobile-friendly image gallery Photo Gallery by 10Web <= 1.8.40 - Authenticated (Contributor+) SQL Injection via 'order_by' Shortcode Attribute CVE-2026-7048 6.5 MediumMay 28, 2026
• 10web form maker WordPress Form Maker Plugin 1.12.24 SQL Injection via admin-ajax.php CVE-2018-25346 7.1 HighMay 23, 2026
• 10web form maker by 10web – mobile-friendly drag & drop contact form builder Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.42 - Unauthenticated SQL Injection via 'inputs' CVE-2026-3359 Public exploit 7.5 HighMay 5, 2026
• 10web form maker by 10web – mobile-friendly drag & drop contact form builder Form Maker by 10Web <= 1.15.40 - Authenticated (Administrator+) SQL Injection via 'ip_search' Parameter CVE-2026-3330 4.9 MediumApril 17, 2026
• 10web form maker by 10web – mobile-friendly drag & drop contact form builder Form Maker by 10Web <= 1.15.40 - Unauthenticated Stored Cross-Site Scripting via Matrix Field Text Box CVE-2026-4388 7.2 HighApril 14, 2026
• 10web photo gallery by 10web WordPress Photo Gallery by 10Web plugin <= 1.8.37 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-32330 4.3 MediumMarch 13, 2026
• 10web photo gallery by 10web WordPress Photo Gallery by 10Web plugin <= 1.8.38 - Cross Site Scripting (XSS) vulnerability CVE-2026-27360 5.9 MediumFebruary 19, 2026
• 10web form maker by 10web – mobile-friendly drag & drop contact form builder Form Maker by 10Web <= 1.15.35 - Unauthenticated Stored Cross-Site Scripting via Hidden Field CVE-2026-1058 7.1 HighFebruary 3, 2026
• 10web form maker by 10web – mobile-friendly drag & drop contact form builder Form Maker by 10Web <= 1.15.35 - Unauthenticated Stored Cross-Site Scripting via SVG file CVE-2026-1065 7.2 HighFebruary 3, 2026
• 10web photo gallery by 10web – mobile-friendly image gallery Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.36 - Missing Authorization to Unauthenticated Arbitrary Comment Deletion CVE-2026-1036 5.3 MediumJanuary 21, 2026
• 10web booster – website speed optimization, cache & page speed optimizer, booster +1 more 10Web Booster <= 2.32.7 - Authenticated (Subscriber+) Arbitrary Folder Deletion via two_clear_page_cache CVE-2025-13377 9.6 CriticalDecember 6, 2025
• 10web map builder for google maps 10WebMapBuilder <= 1.0.63 - Unauthenticated Stored Cross-Site Scripting via Plugin Settings Change CVE-2020-36853 7.2 HighOctober 18, 2025
• 10web form maker by 10web WordPress Form Maker by 10Web plugin <= 1.15.33 - Cross Site Scripting (XSS) Vulnerability CVE-2025-48341 5.9 MediumMay 19, 2025
• 10web photo gallery by 10web, photo gallery +1 more Photo Gallery by 10Web < 1.8.29 - Admin+ Stored XSS CVE-2024-8670 4.8 MediumMay 15, 2025
• 10web form maker, unknown form maker by 10web +1 more Form Maker by 10Web < 1.15.33 - Admin+ Stored XSS via Theme Title CVE-2024-13053 4.8 MediumMay 15, 2025
• 10web form maker, unknown form maker by 10web +1 more Form Maker by 10Web < 1.15.32 - Admin+ Stored XSS CVE-2024-10680 4.8 MediumApril 16, 2025
• 10web photo gallery by 10web – mobile-friendly image gallery Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.34 Reflected Cross-Site Scripting via 'image_id' Parameter CVE-2025-2269 6.1 MediumApril 11, 2025
• 10web photo gallery by 10web, photo gallery +1 more Photo Gallery < 1.8.34 - Unauthenticated Stored XSS CVE-2025-0613 6.1 MediumMarch 31, 2025
• 10web slider, unknown slider by 10web +1 more Slider by 10Web < 1.2.62 - Contributor+ Stored XSS CVE-2024-10566 6.1 MediumMarch 25, 2025
• 10web slider, unknown slider by 10web +1 more Slider by 10Web < 1.2.62 - Admin+ Stored XSS via Widget CVE-2024-10565 6.1 MediumMarch 25, 2025
• 10web form maker, unknown form maker by 10web +1 more Form Maker by 10Web < 1.15.30 - Admin+ Stored XSS CVE-2024-10560 3.5 LowMarch 25, 2025
• 10web photo gallery by 10web, photo gallery +1 more Photo Gallery by 10Web < 1.8.33 - Admin+ Stored XSS CVE-2024-13124 3.5 LowMarch 24, 2025
• Show olderLoading…