Skip to content10web vulnerabilities
Newest
- 10web form maker, unknown form maker by 10web +1 moreForm Maker by 10Web < 1.15.30 - Admin+ Stored XSSCVE-2024-105583.5 Low
- 10web form maker, unknown form maker by 10web +1 moreForm Maker by 10Web < 1.15.33 - Admin+ Stored XSSCVE-2024-136054.8 Medium
- 10web form maker, unknown form maker by 10web +1 moreForm Maker by 10Web < 1.15.31 - Admin+ Stored XSSCVE-2024-105622.7 Low
- 10web map builder for google mapsWordPress 10Web Map Builder for Google Maps plugin <= 1.0.73 - Notice Dismissal VulnerabilityCVE-2023-452725.4 Medium
- 10web 10webanalyticsWordPress 10WebAnalytics plugin <= 1.2.12 - Broken Access Control vulnerabilityCVE-2023-478074.3 Medium
- 10web photo gallery by 10web, photo gallery, photo gallery team gallery by 10web +2 moreWordPress Photo Gallery by 10Web plugin <= 1.8.15 - Broken Access Control vulnerabilityCVE-2023-339954.3 Medium
- 10web form maker by 10web – mobile-friendly drag & drop contact form builder, bqworks accordion slider, colorlibplugins fancybox for wordpress +13 more +15 moreMultiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript LibraryCVE-2024-50206.4 Medium
- 10web photo gallery by 10web, photo gallery, photo gallery by 10web wordpress gallery by 10web wordpress +2 morePhoto Gallery by 10Web < 1.8.31 - Admin+ Stored XSSCVE-2024-107044.8 Medium
- 10web form maker by 10web – mobile-friendly drag & drop contact form builder, form maker +1 moreForm Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.30 - Reflected Cross-Site Scripting via add_query_arg ParameterCVE-2024-102656.1 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery by 10Web <= 1.8.30 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2024-98784.4 Medium
- 10web wps telegram chatWPS Telegram Chat <= 4.6.0 - Missing Authorization to Information ExposureCVE-2024-96305.4 Medium
- 10web wps telegram chatWPS Telegram Chat <= 4.6.0 - Authenticated (Subscriber+) Unauthorized Access to Telegram Bot APICVE-2024-96286.3 Medium
- 10web social post feed10Web Social Post Feed <= 1.2.9 - Reflected Cross-Site ScriptingCVE-2024-96076.1 Medium
- 10web photo gallery by 10web, photo gallery +1 morePhoto Gallery by 10Web <= 1.8.27 - Admin+ Stored XSSCVE-2024-59684.8 Medium
- 10web photo gallery by 10web, photo gallery +1 moreWordPress Photo Gallery by 10Web plugin <= 1.8.27 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-440435.9 Medium
- 10web slider, unknown slider by 10web +1 moreSlider by 10Web < 1.2.59 - Admin+ Stored XSSCVE-2024-82834.8 Medium
- 10web form maker by 10web – mobile-friendly drag & drop contact form builder, form maker +1 moreForm Maker <= 1.15.27 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2024-86335.5 Medium
- 10web form maker, 10web form builder team form maker by 10web +1 moreWordPress Form Maker by 10Web plugin <= 1.15.26 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-432207.1 High
- 10web slider, slider by 10web – responsive image slider +1 moreSlider by 10Web – Responsive Image Slider <= 1.2.57 - Authenticated (Contributor+) SQL Injection via id ParameterCVE-2024-71508.8 High
- 10web slider, unknown slider by 10web +1 moreSlider by 10Web < 1.2.57 - Editor+ Stored XSSCVE-2024-64085.4 Medium
- 10web spidercontacts, spidercontacts wordpress +1 moreSpiderContacts <= 1.1.7 - Reflected XSSCVE-2024-62726.1 Medium
- 10web slider, unknown slider by 10web +1 moreSlider by 10Web < 1.2.56 - Editor+ Stored XSSCVE-2024-60265.4 Medium
- 10web form maker, unknown form maker by 10web +1 moreForm Maker by 10Web < 1.15.26 - Admin+ Stored XSSCVE-2024-61304.8 Medium
- 10web photo gallery by 10web, photo gallery, photo gallery team gallery by 10web +2 moreWordPress Photo Gallery by 10Web plugin <= 1.8.25 - Broken Access Control vulnerabilityCVE-2024-356284.3 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.23 - Authenticated (Contributor+) Path Traversal via esc_dir FunctionCVE-2024-54816.8 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via Zipped SVGCVE-2024-54266.4 Medium
- 10web form maker, 10web form builder team form maker by 10web +1 moreWordPress Form Maker by 10Web plugin <= 1.15.20 - Captcha Bypass Vulnerability vulnerabilityCVE-2023-482905.3 Medium
- 10web form maker, 10web form builder team form maker by 10web +1 moreWordPress Form Maker by 10Web plugin <= 1.15.24 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-344375.9 Medium
- 10web photo gallery by 10web, photo gallery, photo gallery team gallery by 10web +2 moreWordPress Photo Gallery by 10Web plugin <= 1.8.20 - Broken Access Control vulnerabilityCVE-2024-335865.3 Medium
- 10web form maker by 10web – mobile-friendly drag & drop contact form builder, form maker, wordpress form maker by 10web +2 moreForm Maker by 10Web <= 1.15.24 - Authenticated (Subscriber+) Stored Self-Based Cross-Site ScriptingCVE-2024-22584.4 Medium
- 10web slider, slider by 10web +1 moreWordPress Sliderby10Web plugin <= 1.2.54 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-325787.1 High
- 10web photo gallery by 10web, photo gallery, photo gallery team gallery by 10web +2 moreWordPress Photo Gallery by 10Web plugin <= 1.8.21 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-325837.1 High
- 10web form maker, 10web form builder team form maker by 10web +1 moreWordPress Form Maker plugin <= 1.15.23 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-325345.9 Medium
- 10web form maker by 10web – mobile-friendly drag & drop contact form builder, form maker +1 moreForm Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.22 - Sensitive Information ExposureCVE-2024-21125.9 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.21 - Authenticated (Admin+) Stored Cross-Site Scripting via SVGCVE-2024-22965.5 Medium
- 10web map builder for google mapsWordPress 10Web Map Builder for Google Maps plugin <= 1.0.74 - SQL Injection vulnerabilityCVE-2024-311167.6 High
- 10web photo gallery, photogallery +1 moreWordPress Photo Gallery Plugin <= 1.8.21 Stored Cross Site Scripting in UploadHandlerCVE-2024-298335.4 Medium
- 10web photo gallery, photogallery +1 moreWordPress Photo Gallery Plugin <= 1.8.21 Reflected Cross Site Scripting in editimage_bwg thumb_urlCVE-2024-298105.4 Medium
- 10web photo gallery, photogallery +1 moreWordPress Photo Gallery Plugin <= 1.8.21 Reflected Cross Site Scripting in editimage_bwg image_urlCVE-2024-298095.4 Medium
- 10web photo gallery, photogallery +1 moreWordPress Photo Gallery Plugin <= 1.8.21 Reflected Cross Site Scripting in editimage_bwg image_idCVE-2024-298085.4 Medium
- 10web photo gallery, photogallery +1 moreWordPress Photo Gallery Plugin <= 1.8.21 Unauthenticated Reflected Cross Site Scripting in GalleryBox current_urlCVE-2024-298326.1 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery by 10Web - Mobile-Friendly Image Gallery <= 1.8.19 - Directory Traversal to Arbitrary File RenameCVE-2024-02219.1 Critical
- 10web ai assistant – ai content writing assistant, ai assistant +1 more10Web AI Assistant – AI content writing assistant <= 1.0.18 - Missing Authorization to Arbitrary Plugin InstallationCVE-2023-6985Public exploit6.5 Medium
- 10web form maker by 10web – mobile-friendly drag & drop contact form builder, form maker +1 moreForm-Maker (twb_form-maker) <= 1.15.21 - Cross-Site Request Forgery to Limited Code Execution via ExecuteCVE-2024-06675.4 Medium
- 10web photo gallery, photo gallery by 10web – mobile-friendly image gallery +1 morePhoto Gallery by 10Web <= 1.8.18 - Authenticated (Administrator+) Stored Cross-Site Scripting via WidgetCVE-2023-69244.4 Medium
- 10web booster, unknown 10web booster +1 more10Web Booster < 2.24.18 - Unauthenticated Arbitrary Option DeletionCVE-2023-55599.1 Critical
- 10web wdcontactformbuilder, web-dorado wp form builder +1 moreWDContactFormBuilder <= 1.0.72 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2023-50486.4 Medium
- 10web seo, seo by 10web +1 moreWordPress Seo By 10Web Plugin <= 1.2.9 is vulnerable to Cross Site Scripting (XSS)CVE-2023-343757.1 High
- 10web wd widgettwitterWD WidgetTwitter <= 1.0.9 - Authenticated (Contributor+) SQL Injection via ShortcodeCVE-2023-57098.8 High
- 10web form maker by 10web – mobile-friendly drag & drop contact form builder, form maker +1 moreWordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)CVE-2023-450717.1 High
- Show moreLoading…