İçeriğe atla
Noroxi

10web kayıtları

10web üreticisine ait 103 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
2 · %1,9
Pre-auth RCE
5
Düzeltme kaydı olan
%31,1
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

103 kayıt
  • CVE-2022-0169
    61Bu hafta

    Photo Gallery by 10Web < 1.6.0 - Unauthenticated SQL Injection

    KritikCVSS 9,8SilahlaştırılmışEPSS %75

    10web · photo gallery14 Mar 2022

  • CVE-2022-1281
    52Planlayın

    Photo Gallery < 1.6.3 - Unauthenticated SQL Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %43

    10web · photo gallery2 May 2022

  • CVE-2014-9312
    49Planlayın

    Unrestricted File Upload vulnerability in Photo Gallery 1.2.5.

    YüksekCVSS 8,8SilahlaştırılmışEPSS %45

    10web · photo gallery28 Ağu 2017

  • CVE-2019-16119
    46Planlayın

    SQL injection in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via the admin/controllers/Albumsgalleries

    KritikCVSS 9,8Kavram kanıtıEPSS %25

    10web · photo gallery8 Eyl 2019

  • CVE-2019-10866
    41Planlayın

    In the Form Maker plugin before 1.13.3 for WordPress, it's possible to achieve SQL injection in the function get_labels_parameters in the fi

    KritikCVSS 9,8Kavram kanıtıEPSS %6

    10web · form maker23 May 2019

  • CVE-2021-24139
    41Planlayın

    Photo Gallery by 10Web < 1.5.55 - Unauthenticated SQL Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %6

    10web · photo gallery18 Mar 2021

  • CVE-2019-14313
    40Planlayın

    A SQL injection vulnerability exists in the 10Web Photo Gallery plugin before 1.5.31 for WordPress.

    KritikCVSS 9,8İstismar yokEPSS %4

    10web · photo gallery30 Tem 2019

  • CVE-2023-0037
    40Planlayın

    10WebMapBuilder < 1.0.73 - Unauthenticated SQLi

    KritikCVSS 9,8Kavram kanıtıEPSS %4

    10web · map builder for google maps13 Mar 2023

  • CVE-2023-4666
    40Planlayın

    Form-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    10web · form maker16 Eki 2023

  • CVE-2023-5559
    37İzleyin

    10Web Booster < 2.24.18 - Unauthenticated Arbitrary Option Deletion

    KritikCVSS 9,1Kavram kanıtıEPSS %3

    10web · 10web booster27 Kas 2023

  • CVE-2021-24132
    36İzleyin

    Slider by 10Web < 1.2.36 - Multiple Authenticated SQL Injection

    YüksekCVSS 8,8İstismar yokEPSS %3

    10web · slider18 Mar 2021

  • CVE-2023-6985
    35İzleyin

    10Web AI Assistant – AI content writing assistant <= 1.0.18 - Missing Authorization to Arbitrary Plugin Installation

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    10web · ai assistant5 Şub 2024

  • CVE-2019-11590
    35İzleyin

    The 10Web Form Maker plugin before 1.13.5 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local f

    YüksekCVSS 8,8İstismar yokEPSS %1

    10web · form maker29 Nis 2019

  • CVE-2015-9380
    35İzleyin

    The photo-gallery plugin before 1.2.42 for WordPress has CSRF.

    YüksekCVSS 8,8İstismar yokEPSS %1

    10web · photo gallery30 Ağu 2019

  • CVE-2024-5481
    35İzleyin

    Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.23 - Authenticated (Contributor+) Path Traversal via esc_dir Function

    YüksekCVSS 8,8İstismar yokEPSS %1

    10web · photo gallery7 Haz 2024

  • CVE-2024-7150
    35İzleyin

    Slider by 10Web – Responsive Image Slider <= 1.2.57 - Authenticated (Contributor+) SQL Injection via id Parameter

    YüksekCVSS 8,8İstismar yokEPSS %1

    10web · slider8 Ağu 2024

  • CVE-2025-13377
    32İzleyin

    10Web Booster <= 2.32.7 - Authenticated (Subscriber+) Arbitrary Folder Deletion via two_clear_page_cache

    YüksekCVSS 8,1İstismar yokEPSS %1

    10web · 10web booster6 Ara 2025

  • CVE-2015-1055
    31İzleyin

    SQL injection vulnerability in the Photo Gallery plugin 1.2.7 for WordPress allows remote attackers to execute arbitrary SQL commands via th

    YüksekCVSS 7,5İstismar yokEPSS %2

    10web · photo gallery16 Oca 2015

  • CVE-2024-2112
    30İzleyin

    Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.22 - Sensitive Information Exposure

    YüksekCVSS 7,5İstismar yokEPSS %1

    10web · form maker9 Nis 2024

  • CVE-2021-24291
    28İzleyin

    Photo Gallery < 1.5.69 - Multiple Reflected Cross-Site Scripting (XSS)

    OrtaCVSS 6,1Kavram kanıtıEPSS %15

    10web · photo gallery14 May 2021

  • CVE-2017-12977
    28İzleyin

    The Web-Dorado "Photo Gallery by WD - Responsive Photo Gallery" plugin before 1.3.51 for WordPress has a SQL injection vulnerability related

    YüksekCVSS 7,2İstismar yokEPSS %2

    10web · photo gallery20 Ağu 2017

  • CVE-2024-0221
    28İzleyin

    Photo Gallery by 10Web - Mobile-Friendly Image Gallery <= 1.8.19 - Directory Traversal to Arbitrary File Rename

    YüksekCVSS 7,2İstismar yokEPSS %1

    10web · photo gallery5 Şub 2024

  • CVE-2022-3300
    28İzleyin

    Form Maker by 10Web < 1.15.6 - Admin+ SQLI

    YüksekCVSS 7,2İstismar yokEPSS %1

    10web · form maker25 Eki 2022

  • CVE-2024-31116
    28İzleyin

    WordPress 10Web Map Builder for Google Maps plugin <= 1.0.74 - SQL Injection vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %1

    10web · map builder for google maps31 Mar 2024

  • CVE-2019-16118
    26İzleyin

    Cross site scripting (XSS) in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via admin/controllers/Option

    OrtaCVSS 6,1Kavram kanıtıEPSS %5

    10web · photo gallery8 Eyl 2019