Product by 10Web

    Form Maker by 10Web

    25 known vulnerabilities in Form Maker by 10Web (10Web), 0 of them actively exploited (CISA KEV).

    Key figures

    25

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Form Maker by 10Web (10Web)
    CriticalCVE-2019-10866

    10Web Form Maker: SQL Injection

    9.8
    CriticalCVE-2023-4666

    Form-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload

    9.8
    HighCVE-2019-11590

    10Web Form Maker: Path Traversal

    8.8
    HighCVE-2022-3300

    Form Maker by 10Web < 1.15.6 - Admin+ SQLI

    7.2
    MediumCVE-2021-24526

    Form Maker < 1.13.60 - Authenticated Stored XSS

    5.4
    MediumCVE-2022-1564

    Form Maker By 10Web < 1.14.12 - Admin+ Stored Cross-Site Scripting

    4.8
    HighCVE-2024-2112

    10Web Form Maker: Improper Authentication

    also in 1 other product

    5.9
    HighCVE-2018-25346

    WordPress Form Maker Plugin 1.12.24 SQL Injection via admin-ajax.php

    7.1
    HighCVE-2023-45070

    WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)

    also in 1 other product

    7.1
    HighCVE-2023-45071

    WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)

    also in 1 other product

    7.1
    MediumCVE-2024-34437

    WordPress Form Maker by 10Web plugin <= 1.15.24 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    5.9
    MediumCVE-2024-10265

    10Web Form Maker: Cross-site Scripting

    also in 1 other product

    6.1
    HighCVE-2024-43220

    WordPress Form Maker by 10Web plugin <= 1.15.26 - Reflected Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    7.1
    MediumCVE-2024-6130

    Form Maker by 10Web < 1.15.26 - Admin+ Stored XSS

    4.8
    MediumCVE-2024-32534

    WordPress Form Maker plugin <= 1.15.23 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    5.9
    MediumCVE-2024-8633

    Form Maker <= 1.15.27 - Authenticated (Administrator+) Stored Cross-Site Scripting

    also in 1 other product

    5.5
    MediumCVE-2023-48290

    WordPress Form Maker by 10Web plugin <= 1.15.20 - Captcha Bypass Vulnerability vulnerability

    also in 1 other product

    5.3
    MediumCVE-2024-13605

    Form Maker by 10Web < 1.15.33 - Admin+ Stored XSS

    4.8
    MediumCVE-2024-13053

    Form Maker by 10Web < 1.15.33 - Admin+ Stored XSS via Theme Title

    4.8
    MediumCVE-2024-10680

    Form Maker by 10Web < 1.15.32 - Admin+ Stored XSS

    4.8
    MediumCVE-2024-2258

    Form Maker by 10Web <= 1.15.24 - Authenticated (Subscriber+) Stored Self-Based Cross-Site Scripting

    also in 1 other product

    4.4
    MediumCVE-2024-0667

    10Web Form Maker: Inappropriate Source Code Style or Formatting

    also in 1 other product

    5.4
    LowCVE-2024-10562

    Form Maker by 10Web < 1.15.31 - Admin+ Stored XSS

    2.7
    LowCVE-2024-10560

    Form Maker by 10Web < 1.15.30 - Admin+ Stored XSS

    3.5
    LowCVE-2024-10558

    Form Maker by 10Web < 1.15.30 - Admin+ Stored XSS

    3.5

    All products by 10Web