Skip to content10web vulnerabilities
Newest
- 10web form maker by 10web – mobile-friendly drag & drop contact form builder, form maker +1 moreWordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)CVE-2023-450707.1 High
- 10web form maker, unknown form maker by 10web +1 moreForm-Maker < 1.15.20 - Unauthenticated Arbitrary File UploadCVE-2023-46669.8 Critical
- 10web image optimizer, unknown image optimizer by 10web +1 moreImage Optimizer by 10web < 1.0.27 - Reflected Cross-Site ScriptingCVE-2023-21226.1 Medium
- 10web 10webanalytics10WebAnalytics <= 1.2.8 - Cross-Site Request Forgery BypassCVE-2020-367564.3 Medium
- 10web photo galleryThe 10Web Photo Gallery plugin through 1.5.69 for WordPress allows XSS via theme_id for...CVE-2021-468896.1 Medium
- 10web seo, unknown seo by 10web +1 moreSeo By 10Web < 1.2.7 - Admin+ Stored XSSCVE-2023-22244.8 Medium
- 10web social post feed, unknown 10web social post feed +1 more10WebSocial < 1.2.9 - Reflected XSSCVE-2023-25036.1 Medium
- 10web image optimizer, unknown image optimizer by 10web +1 moreImage Optimizer by 10web < 1.0.27 - Admin+ Path TraversalCVE-2023-21172.7 Low
- 10web photo gallery by 10web, photo gallery +1 morePhoto Gallery by 10Web < 1.8.15 - Admin+ Path TraversalCVE-2023-14274.9 Medium
- 10web map builder for google maps, unknown 10web map builder for google maps +1 more10WebMapBuilder < 1.0.73 - Unauthenticated SQLiCVE-2023-00379.8 Critical
- unknown 10webmapbuilder, 10web map builder for google maps +1 more10WebMapBuilder < 1.0.72 - Contributor+ Stored XSS via ShortcodeCVE-2022-47585.4 Medium
- 10web slider, unknown sliderby10web +1 moreSliderby10Web < 1.2.53 - Admin+ Stored XSSCVE-2022-41974.8 Medium
- 10web photo gallery by 10web, photo gallery +1 morePhoto Gallery < 1.8.3 - Stored XSS via CSRFCVE-2022-40585.4 Medium
- 10web photo galleryVMware Tools for Windows (12.x.y prior to 12.1.5, 11.x.y and 10.x.y) contains a denial-of-service...CVE-2021-316936.1 Medium
- 10web form maker, form maker by 10web – mobile-friendly drag & drop contact form builder +1 moreForm Maker by 10Web < 1.15.6 - Admin+ SQLICVE-2022-33007.2 High
- 10web photo gallery, photo gallery by 10web – mobile-friendly image gallery +1 morePhoto Gallery < 1.6.4 - Admin+ Stored Cross-Site ScriptingCVE-2022-13944.8 Medium
- 10web form maker, form maker by 10web – mobile-friendly drag & drop contact form builder +1 moreForm Maker By 10Web < 1.14.12 - Admin+ Stored Cross-Site ScriptingCVE-2022-15644.8 Medium
- 10web sliderby10webSliderby10Web < 1.2.52 - Admin+ Stored Cross-Site ScriptingCVE-2022-13204.8 Medium
- 10web photo gallery, photo gallery by 10web – mobile-friendly image gallery +1 morePhoto Gallery < 1.6.3 - Reflected Cross-Site ScriptingCVE-2022-12826.1 Medium
- 10web photo gallery, photo gallery by 10web – mobile-friendly image gallery +1 morePhoto Gallery < 1.6.3 - Unauthenticated SQL InjectionCVE-2022-1281EPSS 43.4%9.8 Critical
- 10web photo gallery, photo gallery by 10web – mobile-friendly image gallery +1 morePhoto Gallery by 10Web < 1.6.0 - Unauthenticated SQL InjectionCVE-2022-0169Public exploitEPSS 74.6%9.8 Critical
- 10web spidercalendarSpiderCalendar <= 1.5.65 - Reflected Cross-Site ScriptingCVE-2022-02126.1 Medium
- unknown 10web social photo feed, 10web 10websocial +1 more10Web Social Photo Feed < 1.4.29 - Reflected Cross-Site Scripting (XSS)CVE-2021-250476.1 Medium
- 10web photo gallery, photo gallery by 10web – mobile-friendly image gallery +1 morePhoto Gallery by 10Web < 1.5.68 - Reflected Cross-Site Scripting (XSS)CVE-2021-250416.1 Medium
- 10web form maker by 10web – mobile-friendly drag & drop contact form builder, form maker +1 moreForm Maker < 1.13.60 - Authenticated Stored XSSCVE-2021-245265.4 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery < 1.5.75 - File Upload Path TraversalCVE-2021-243634.9 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery < 1.5.75 - Stored Cross-Site Scripting via Uploaded SVGCVE-2021-243626.1 Medium
- 10web photo gallery, photo gallery by 10web – mobile-friendly image gallery +1 morePhoto Gallery < 1.5.67 - Authenticated Stored Cross-Site Scripting via Gallery TitleCVE-2021-243104.8 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery, photo gallery team gallery by 10web – mobile-friendly image gallery +2 morePhoto Gallery < 1.5.69 - Multiple Reflected Cross-Site Scripting (XSS)CVE-2021-24291EPSS 14.5%6.1 Medium
- 10web photo gallery by 10web, photo gallery +1 morePhoto Gallery by 10Web < 1.5.55 - Unauthenticated SQL InjectionCVE-2021-241399.8 Critical
- 10web slider, unknown slider by 10web +1 moreSlider by 10Web < 1.2.36 - Multiple Authenticated SQL InjectionCVE-2021-241328.8 High
- 10web photo galleryMultiple stored XSS vulnerabilities exist in the 10Web Photo Gallery plugin before 1.5.46...CVE-2020-93354.8 Medium
- 10web photo galleryMultiple cross-site scripting (XSS) vulnerabilities in the Photo Gallery plugin before 1.2.11 for...CVE-2015-13945.4 Medium
- 10web photo galleryCross site scripting (XSS) in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for...CVE-2019-16117Public exploit6.1 Medium
- 10web photo galleryCross site scripting (XSS) in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for...CVE-2019-16118Public exploit6.1 Medium
- 10web photo gallerySQL injection in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress...CVE-2019-16119Public exploitEPSS 24.8%9.8 Critical
- 10web photo galleryThe photo-gallery plugin before 1.2.42 for WordPress has CSRF.CVE-2015-93808.8 High
- 10web photo galleryThe 10Web Photo Gallery plugin before 1.5.23 for WordPress has authenticated stored XSS.CVE-2019-147975.4 Medium
- 10web photo galleryThe 10Web Photo Gallery plugin before 1.5.25 for WordPress has Authenticated Local File Inclusion...CVE-2019-147984.9 Medium
- 10web photo galleryA SQL injection vulnerability exists in the 10Web Photo Gallery plugin before 1.5.31 for...CVE-2019-143139.8 Critical
- 10web form makerIn the Form Maker plugin before 1.13.3 for WordPress, it's possible to achieve SQL injection in...CVE-2019-10866Public exploit9.8 Critical
- 10web form makerThe 10Web Form Maker plugin before 1.13.5 for WordPress allows CSRF via the wp-admin/admin-ajax...CVE-2019-115908.8 High
- 10web photo galleryCross-site scripting (XSS) vulnerability in the filemanager in the Photo Gallery plugin before 1...CVE-2015-23245.4 Medium
- 10web photo galleryUnrestricted File Upload vulnerability in Photo Gallery 1.2.5.CVE-2014-9312Public exploitEPSS 45.4%8.8 High
- 10web photo galleryThe Web-Dorado "Photo Gallery by WD - Responsive Photo Gallery" plugin before 1.3.51 for...CVE-2017-129777.2 High
- 10web photo gallerySQL injection vulnerability in the Photo Gallery plugin before 1.2.11 for WordPress allows remote...CVE-2015-13936.5 Medium
- 10web photo gallerySQL injection vulnerability in the Photo Gallery plugin 1.2.7 for WordPress allows remote...CVE-2015-10557.5 High