10web / Form Maker
24 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2018-25346 | WordPress Form Maker Plugin 1.12.24 SQL Injection via admin-ajax.php | HIGH | 7.1 | May 23, 2026 |
| CVE-2024-13053 | Form Maker by 10Web < 1.15.33 - Admin+ Stored XSS via Theme Title | MEDIUM | 4.8 | May 15, 2025 |
| CVE-2024-10680 | Form Maker by 10Web < 1.15.32 - Admin+ Stored XSS | MEDIUM | 4.8 | Apr 16, 2025 |
| CVE-2024-10560 | Form Maker by 10Web < 1.15.30 - Admin+ Stored XSS | LOW | 3.5 | Mar 25, 2025 |
| CVE-2024-10558 | Form Maker by 10Web < 1.15.30 - Admin+ Stored XSS | LOW | 3.5 | Mar 24, 2025 |
| CVE-2024-13605 | Form Maker by 10Web < 1.15.33 - Admin+ Stored XSS | MEDIUM | 4.8 | Feb 24, 2025 |
| CVE-2024-10562 | Form Maker by 10Web < 1.15.31 - Admin+ Stored XSS | LOW | 2.7 | Jan 7, 2025 |
| CVE-2024-10265 | Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.30 - Reflected Cross-Site Scripting via add_query_arg Parameter | MEDIUM | 6.1 | Nov 10, 2024 |
| CVE-2024-8633 | Form Maker <= 1.15.27 - Authenticated (Administrator+) Stored Cross-Site Scripting | MEDIUM | 5.5 | Sep 26, 2024 |
| CVE-2024-43220 | WordPress Form Maker by 10Web plugin <= 1.15.26 - Reflected Cross Site Scripting (XSS) vulnerability | HIGH | 7.1 | Aug 12, 2024 |
| CVE-2024-6130 | Form Maker by 10Web < 1.15.26 - Admin+ Stored XSS | MEDIUM | 4.8 | Jul 1, 2024 |
| CVE-2023-48290 | WordPress Form Maker by 10Web plugin <= 1.15.20 - Captcha Bypass Vulnerability vulnerability | MEDIUM | 5.3 | Jun 4, 2024 |
| CVE-2024-34437 | WordPress Form Maker by 10Web plugin <= 1.15.24 - Cross Site Scripting (XSS) vulnerability | MEDIUM | 5.9 | May 9, 2024 |
| CVE-2024-2258 | Form Maker by 10Web <= 1.15.24 - Authenticated (Subscriber+) Stored Self-Based Cross-Site Scripting | MEDIUM | 5.4 | Apr 27, 2024 |
| CVE-2024-32534 | WordPress Form Maker plugin <= 1.15.23 - Cross Site Scripting (XSS) vulnerability | MEDIUM | 5.9 | Apr 17, 2024 |
| CVE-2024-2112 | Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.22 - Sensitive Information Exposure | HIGH | 7.5 | Apr 9, 2024 |
| CVE-2024-0667 | Form-Maker (twb_form-maker) <= 1.15.21 - Cross-Site Request Forgery to Limited Code Execution via Execute | MEDIUM | 6.3 | Jan 27, 2024 |
| CVE-2023-45071 | WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS) | HIGH | 7.1 | Oct 18, 2023 |
| CVE-2023-45070 | WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS) | HIGH | 7.1 | Oct 18, 2023 |
| CVE-2023-4666 | Form-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload | CRITICAL | 9.8 | Oct 16, 2023 |
| CVE-2022-3300 | Form Maker by 10Web < 1.15.6 - Admin+ SQLI | HIGH | 7.2 | Oct 25, 2022 |
| CVE-2022-1564 | Form Maker By 10Web < 1.14.12 - Admin+ Stored Cross-Site Scripting | MEDIUM | 4.8 | May 30, 2022 |
| CVE-2021-24526 | Form Maker < 1.13.60 - Authenticated Stored XSS | MEDIUM | 5.4 | Aug 16, 2021 |
| CVE-2019-10866 | In the Form Maker plugin before 1.13.3 for WordPress, it's possible to achieve SQL injection in the function get_labels_parameters in the file form-maker/admin… | CRITICAL | 9.8 | May 23, 2019 |
| CVE-2019-11590 | The 10Web Form Maker plugin before 1.13.5 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file inclusion via d… | HIGH | 8.8 | Apr 29, 2019 |
Showing 1 to 24 of 24 CVEs