Skip to content10web Form Maker By 10web vulnerabilities
- 10web form maker by 10webWordPress Form Maker by 10Web plugin <= 1.15.50 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1194837.1 High
- 10web form maker by 10web – mobile-friendly drag & drop contact form builderForm Maker by 10Web <= 1.15.50 - Unauthenticated Stored Cross-Site Scripting via disabled_fields ParameterCVE-2026-1180675.4 Medium
- 10web form maker by 10web – mobile-friendly drag & drop contact form builderForm Maker by 10Web <= 1.15.50 - Unauthenticated Stored Cross-Site Scripting via Hidden Input Field ValueCVE-2026-1205127.2 High
- 10web form maker by 10web – mobile-friendly drag & drop contact form builderForm Maker by 10Web <= 1.15.48 - Unauthenticated SQL Injection via 'inputs' ParameterCVE-2026-958087.5 High
- 10web form maker by 10web – mobile-friendly drag & drop contact form builderForm Maker by 10Web <= 1.15.48 - Reflected Cross-Site Scripting via 'inputs' Parameter Array KeyCVE-2026-1039986.1 Medium
- 10web form maker by 10web – mobile-friendly drag & drop contact form builderForm Maker by 10Web <= 1.15.47 - Unauthenticated Stored Cross-Site Scripting via Mark on Map Longitude/Latitude FieldsCVE-2026-968137.2 High
- 10web form maker by 10web – mobile-friendly drag & drop contact form builderForm Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.46 - Reflected Cross-Site ScriptingCVE-2026-856456.1 Medium
- 10web form maker by 10webWordPress Form Maker by 10Web plugin <= 1.15.49 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-666167.1 High
- 10web form maker by 10web – mobile-friendly drag & drop contact form builderForm Maker by 10Web <= 1.15.44 - Authenticated (Subscriber+) SQL Injection via '{username}' Placeholder in Dynamic-Choice Field WHERE ClauseCVE-2026-159935.3 Medium
- 10web form maker by 10web – mobile-friendly drag & drop contact form builderForm Maker by 10Web <= 1.15.43 - Authenticated (Adminsitrator+) SQL Injection via 'groupids' ParameterCVE-2026-117764.9 Medium
- 10web form maker by 10web – mobile-friendly drag & drop contact form builderForm Maker by 10Web <= 1.15.43 - Authenticated (Administrator+) SQL Injection via 'name' ParameterCVE-2026-117774.9 Medium
- 10web form maker by 10webWordPress Form Maker by 10Web plugin <= 1.15.38 - SQL Injection vulnerabilityCVE-2026-395029.3 Critical
- 10web form maker by 10web – mobile-friendly drag & drop contact form builderForm Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.42 - Unauthenticated SQL Injection via 'inputs'CVE-2026-3359Public exploit7.5 High
- 10web form maker by 10web – mobile-friendly drag & drop contact form builderForm Maker by 10Web <= 1.15.40 - Authenticated (Administrator+) SQL Injection via 'ip_search' ParameterCVE-2026-33304.9 Medium
- 10web form maker by 10web – mobile-friendly drag & drop contact form builderForm Maker by 10Web <= 1.15.40 - Unauthenticated Stored Cross-Site Scripting via Matrix Field Text BoxCVE-2026-43887.2 High
- 10web form maker by 10web – mobile-friendly drag & drop contact form builderForm Maker by 10Web <= 1.15.35 - Unauthenticated Stored Cross-Site Scripting via Hidden FieldCVE-2026-10587.1 High
- 10web form maker by 10web – mobile-friendly drag & drop contact form builderForm Maker by 10Web <= 1.15.35 - Unauthenticated Stored Cross-Site Scripting via SVG fileCVE-2026-10657.2 High
- 10web form maker by 10webWordPress Form Maker by 10Web plugin <= 1.15.33 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-483415.9 Medium
- 10web form maker by 10web – mobile-friendly drag & drop contact form builder, bqworks accordion slider, colorlibplugins fancybox for wordpress +13 more +15 moreMultiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript LibraryCVE-2024-50206.4 Medium
- 10web form maker by 10web – mobile-friendly drag & drop contact form builder, form maker +1 moreForm Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.30 - Reflected Cross-Site Scripting via add_query_arg ParameterCVE-2024-102656.1 Medium
- 10web form maker by 10web – mobile-friendly drag & drop contact form builder, form maker +1 moreForm Maker <= 1.15.27 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2024-86335.5 Medium
- 10web form maker by 10web – mobile-friendly drag & drop contact form builder, form maker, wordpress form maker by 10web +2 moreForm Maker by 10Web <= 1.15.24 - Authenticated (Subscriber+) Stored Self-Based Cross-Site ScriptingCVE-2024-22584.4 Medium
- 10web form maker by 10web – mobile-friendly drag & drop contact form builder, form maker +1 moreForm Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.22 - Sensitive Information ExposureCVE-2024-21125.9 Medium
- 10web form maker by 10web – mobile-friendly drag & drop contact form builder, form maker +1 moreForm-Maker (twb_form-maker) <= 1.15.21 - Cross-Site Request Forgery to Limited Code Execution via ExecuteCVE-2024-06675.4 Medium
- 10web form maker by 10web – mobile-friendly drag & drop contact form builder, form maker +1 moreWordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)CVE-2023-450717.1 High
- 10web form maker by 10web – mobile-friendly drag & drop contact form builder, form maker +1 moreWordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)CVE-2023-450707.1 High
- 10web form maker, form maker by 10web – mobile-friendly drag & drop contact form builder +1 moreForm Maker by 10Web < 1.15.6 - Admin+ SQLICVE-2022-33007.2 High
- 10web form maker, form maker by 10web – mobile-friendly drag & drop contact form builder +1 moreForm Maker By 10Web < 1.14.12 - Admin+ Stored Cross-Site ScriptingCVE-2022-15644.8 Medium
- 10web form maker by 10web – mobile-friendly drag & drop contact form builder, form maker +1 moreForm Maker < 1.13.60 - Authenticated Stored XSSCVE-2021-245265.4 Medium