10web Form Maker vulnerabilities

• 10web form maker, unknown form maker by 10web +1 more Form Maker by 10Web < 1.15.33 - Admin+ Stored XSS via Theme Title CVE-2024-13053 4.8 MediumMay 15, 2025
• 10web form maker, unknown form maker by 10web +1 more Form Maker by 10Web < 1.15.32 - Admin+ Stored XSS CVE-2024-10680 4.8 MediumApril 16, 2025
• 10web form maker, unknown form maker by 10web +1 more Form Maker by 10Web < 1.15.30 - Admin+ Stored XSS CVE-2024-10560 3.5 LowMarch 25, 2025
• 10web form maker, unknown form maker by 10web +1 more Form Maker by 10Web < 1.15.30 - Admin+ Stored XSS CVE-2024-10558 3.5 LowMarch 24, 2025
• 10web form maker, unknown form maker by 10web +1 more Form Maker by 10Web < 1.15.33 - Admin+ Stored XSS CVE-2024-13605 4.8 MediumFebruary 24, 2025
• 10web form maker, unknown form maker by 10web +1 more Form Maker by 10Web < 1.15.31 - Admin+ Stored XSS CVE-2024-10562 2.7 LowJanuary 7, 2025
• 10web form maker by 10web – mobile-friendly drag & drop contact form builder, form maker +1 more Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.30 - Reflected Cross-Site Scripting via add_query_arg Parameter CVE-2024-10265 6.1 MediumNovember 10, 2024
• 10web form maker by 10web – mobile-friendly drag & drop contact form builder, form maker +1 more Form Maker <= 1.15.27 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2024-8633 5.5 MediumSeptember 26, 2024
• 10web form maker, 10web form builder team form maker by 10web +1 more WordPress Form Maker by 10Web plugin <= 1.15.26 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-43220 7.1 HighAugust 12, 2024
• 10web form maker, unknown form maker by 10web +1 more Form Maker by 10Web < 1.15.26 - Admin+ Stored XSS CVE-2024-6130 4.8 MediumJuly 1, 2024
• 10web form maker, 10web form builder team form maker by 10web +1 more WordPress Form Maker by 10Web plugin <= 1.15.20 - Captcha Bypass Vulnerability vulnerability CVE-2023-48290 5.3 MediumJune 4, 2024
• 10web form maker, 10web form builder team form maker by 10web +1 more WordPress Form Maker by 10Web plugin <= 1.15.24 - Cross Site Scripting (XSS) vulnerability CVE-2024-34437 5.9 MediumMay 9, 2024
• 10web form maker by 10web – mobile-friendly drag & drop contact form builder, form maker, wordpress form maker by 10web +2 more Form Maker by 10Web <= 1.15.24 - Authenticated (Subscriber+) Stored Self-Based Cross-Site Scripting CVE-2024-2258 4.4 MediumApril 27, 2024
• 10web form maker, 10web form builder team form maker by 10web +1 more WordPress Form Maker plugin <= 1.15.23 - Cross Site Scripting (XSS) vulnerability CVE-2024-32534 5.9 MediumApril 17, 2024
• 10web form maker by 10web – mobile-friendly drag & drop contact form builder, form maker +1 more Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.22 - Sensitive Information Exposure CVE-2024-2112 5.9 MediumApril 9, 2024
• 10web form maker by 10web – mobile-friendly drag & drop contact form builder, form maker +1 more Form-Maker (twb_form-maker) <= 1.15.21 - Cross-Site Request Forgery to Limited Code Execution via Execute CVE-2024-0667 5.4 MediumJanuary 27, 2024
• 10web form maker by 10web – mobile-friendly drag & drop contact form builder, form maker +1 more WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS) CVE-2023-45071 7.1 HighOctober 18, 2023
• 10web form maker by 10web – mobile-friendly drag & drop contact form builder, form maker +1 more WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS) CVE-2023-45070 7.1 HighOctober 18, 2023
• 10web form maker, unknown form maker by 10web +1 more Form-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload CVE-2023-4666 9.8 CriticalOctober 16, 2023
• 10web form maker, form maker by 10web – mobile-friendly drag & drop contact form builder +1 more Form Maker by 10Web < 1.15.6 - Admin+ SQLI CVE-2022-3300 7.2 HighOctober 25, 2022
• 10web form maker, form maker by 10web – mobile-friendly drag & drop contact form builder +1 more Form Maker By 10Web < 1.14.12 - Admin+ Stored Cross-Site Scripting CVE-2022-1564 4.8 MediumMay 30, 2022
• 10web form maker by 10web – mobile-friendly drag & drop contact form builder, form maker +1 more Form Maker < 1.13.60 - Authenticated Stored XSS CVE-2021-24526 5.4 MediumAugust 16, 2021
• 10web form maker In the Form Maker plugin before 1.13.3 for WordPress, it's possible to achieve SQL injection in... CVE-2019-10866 Public exploit 9.8 CriticalMay 23, 2019
• 10web form maker The 10Web Form Maker plugin before 1.13.5 for WordPress allows CSRF via the wp-admin/admin-ajax... CVE-2019-11590 8.8 HighApril 29, 2019