Product by 10Web

    Form Maker By 10web – Mobile-friendly Drag & Drop Contact Form Builder

    25 known vulnerabilities in Form Maker By 10web – Mobile-friendly Drag & Drop Contact Form Builder (10Web), 0 of them actively exploited (CISA KEV).

    Key figures

    25

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Form Maker By 10web – Mobile-friendly Drag & Drop Contact Form Builder (10Web)
    HighCVE-2022-3300

    Form Maker by 10Web < 1.15.6 - Admin+ SQLI

    also in 1 other product

    		7.2
    HighCVE-2026-95808

    Form Maker by 10Web <= 1.15.48 - Unauthenticated SQL Injection via 'inputs' Parameter

    		7.5
    HighCVE-2026-120512

    Cross-site Scripting (CVE-2026-120512)

    		7.2
    HighCVE-2026-96813

    Cross-site Scripting (CVE-2026-96813)

    		7.2
    MediumCVE-2026-85645

    Cross-site Scripting (CVE-2026-85645)

    		6.1
    MediumCVE-2026-15993

    SQL Injection (CVE-2026-15993)

    		5.3
    MediumCVE-2021-24526

    Form Maker < 1.13.60 - Authenticated Stored XSS

    also in 1 other product

    		5.4
    MediumCVE-2026-118067

    Cross-site Scripting (CVE-2026-118067)

    		5.4
    HighCVE-2026-3359

    SQL Injection (CVE-2026-3359)

    		7.5
    MediumCVE-2026-103998

    Form Maker by 10Web <= 1.15.48 - Reflected Cross-Site Scripting via 'inputs' Parameter Array Key

    		6.1
    MediumCVE-2022-1564

    Form Maker By 10Web < 1.14.12 - Admin+ Stored Cross-Site Scripting

    also in 1 other product

    		4.8
    HighCVE-2026-1065

    Form Maker by 10Web <= 1.15.35 - Unauthenticated Stored Cross-Site Scripting via SVG file

    		7.2
    HighCVE-2024-2112

    10Web Form Maker: Improper Authentication

    also in 1 other product

    		5.9
    HighCVE-2026-1058

    Form Maker by 10Web <= 1.15.35 - Unauthenticated Stored Cross-Site Scripting via Hidden Field

    		7.1
    HighCVE-2026-4388

    Cross-site Scripting (CVE-2026-4388)

    		7.2
    MediumCVE-2026-3330

    SQL Injection (CVE-2026-3330)

    		4.9
    MediumCVE-2024-5020

    ExtendThemes Colibri Page Builder: Cross-site Scripting

    also in 12 other products

    		6.4
    HighCVE-2023-45070

    WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)

    also in 2 other products

    		7.1
    MediumCVE-2026-11776

    SQL Injection (CVE-2026-11776)

    		4.9
    MediumCVE-2026-11777

    Form Maker by 10Web <= 1.15.43 - Authenticated (Administrator+) SQL Injection via 'name' Parameter

    		4.9
    HighCVE-2023-45071

    WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)

    also in 2 other products

    		7.1
    MediumCVE-2024-10265

    10Web Form Maker: Cross-site Scripting

    also in 1 other product

    		6.1
    MediumCVE-2024-8633

    Form Maker <= 1.15.27 - Authenticated (Administrator+) Stored Cross-Site Scripting

    also in 1 other product

    		5.5
    MediumCVE-2024-2258

    Form Maker by 10Web <= 1.15.24 - Authenticated (Subscriber+) Stored Self-Based Cross-Site Scripting

    also in 1 other product

    		4.4
    MediumCVE-2024-0667

    10Web Form Maker: Inappropriate Source Code Style or Formatting

    also in 1 other product

    		5.4

    All products by 10Web