Product by 10Web
Form Maker by 10Web
25 known vulnerabilities in Form Maker by 10Web (10Web), 0 of them actively exploited (CISA KEV).
Key figures
25
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2019-10866 | 10Web Form Maker: SQL Injection | 9.8 | |
| Critical | CVE-2023-4666 | Form-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload | 9.8 | |
| High | CVE-2019-11590 | 10Web Form Maker: Path Traversal | 8.8 | |
| High | CVE-2022-3300 | Form Maker by 10Web < 1.15.6 - Admin+ SQLI | 7.2 | |
| Medium | CVE-2021-24526 | Form Maker < 1.13.60 - Authenticated Stored XSS | 5.4 | |
| Medium | CVE-2022-1564 | Form Maker By 10Web < 1.14.12 - Admin+ Stored Cross-Site Scripting | 4.8 | |
| High | CVE-2024-2112 | 10Web Form Maker: Improper Authentication | 5.9 | |
| High | CVE-2018-25346 | WordPress Form Maker Plugin 1.12.24 SQL Injection via admin-ajax.php | 7.1 | |
| High | CVE-2023-45070 | WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS) | 7.1 | |
| High | CVE-2023-45071 | WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS) | 7.1 | |
| Medium | CVE-2024-34437 | WordPress Form Maker by 10Web plugin <= 1.15.24 - Cross Site Scripting (XSS) vulnerability | 5.9 | |
| Medium | CVE-2024-10265 | 10Web Form Maker: Cross-site Scripting | 6.1 | |
| High | CVE-2024-43220 | WordPress Form Maker by 10Web plugin <= 1.15.26 - Reflected Cross Site Scripting (XSS) vulnerability | 7.1 | |
| Medium | CVE-2024-6130 | Form Maker by 10Web < 1.15.26 - Admin+ Stored XSS | 4.8 | |
| Medium | CVE-2024-32534 | WordPress Form Maker plugin <= 1.15.23 - Cross Site Scripting (XSS) vulnerability | 5.9 | |
| Medium | CVE-2024-8633 | Form Maker <= 1.15.27 - Authenticated (Administrator+) Stored Cross-Site Scripting | 5.5 | |
| Medium | CVE-2023-48290 | WordPress Form Maker by 10Web plugin <= 1.15.20 - Captcha Bypass Vulnerability vulnerability | 5.3 | |
| Medium | CVE-2024-13605 | Form Maker by 10Web < 1.15.33 - Admin+ Stored XSS | 4.8 | |
| Medium | CVE-2024-13053 | Form Maker by 10Web < 1.15.33 - Admin+ Stored XSS via Theme Title | 4.8 | |
| Medium | CVE-2024-10680 | Form Maker by 10Web < 1.15.32 - Admin+ Stored XSS | 4.8 | |
| Medium | CVE-2024-2258 | Form Maker by 10Web <= 1.15.24 - Authenticated (Subscriber+) Stored Self-Based Cross-Site Scripting | 4.4 | |
| Medium | CVE-2024-0667 | 10Web Form Maker: Inappropriate Source Code Style or Formatting | 5.4 | |
| Low | CVE-2024-10562 | Form Maker by 10Web < 1.15.31 - Admin+ Stored XSS | 2.7 | |
| Low | CVE-2024-10560 | Form Maker by 10Web < 1.15.30 - Admin+ Stored XSS | 3.5 | |
| Low | CVE-2024-10558 | Form Maker by 10Web < 1.15.30 - Admin+ Stored XSS | 3.5 |