Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder

Уязвимости

• CVE-2019-10866без авторизации

  In the Form Maker plugin before 1.13.3 for WordPress, it's possible to achieve SQL injection in the function get_labels_parameters in the fi

  Критич. 9.8

• CVE-2026-39502без авторизации≤ 1.15.38

  WordPress Form Maker by 10Web plugin <= 1.15.38 - SQL Injection vulnerability

  Критич. 9.3

• CVE-2019-11590без авторизации · нужен клик

  The 10Web Form Maker plugin before 1.13.5 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local f

  Высокий 8.8

• CVE-2018-10504без авторизации · нужен клик

  The WebDorado "Form Maker by WD" plugin before 1.12.24 for WordPress allows CSV injection.

  Высокий 7.8

• CVE-2026-3359без авторизации≤ 1.15.42

  Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.42 - Unauthenticated SQL Injection via 'inputs'

  Высокий 7.5

• CVE-2026-96813без авторизации≤ 1.15.47

  Form Maker by 10Web <= 1.15.47 - Unauthenticated Stored Cross-Site Scripting via Mark on Map Longitude/Latitude Fields

  Высокий 7.2

• CVE-2026-4388без авторизации≤ 1.15.40

  Form Maker by 10Web <= 1.15.40 - Unauthenticated Stored Cross-Site Scripting via Matrix Field Text Box

  Высокий 7.2

• CVE-2026-1065без авторизации≤ 1.15.35

  Form Maker by 10Web <= 1.15.35 - Unauthenticated Stored Cross-Site Scripting via SVG file

  Высокий 7.2

• CVE-2026-66616без авторизации · нужен кликисправления нет

  WordPress Form Maker by 10Web plugin <= 1.15.48 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2026-1058без авторизации · нужен клик≤ 1.15.35

  Form Maker by 10Web <= 1.15.35 - Unauthenticated Stored Cross-Site Scripting via Hidden Field

  Высокий 7.1

• CVE-2024-0667без авторизации · нужен клик≤ 1.15.21

  Form-Maker (twb_form-maker) <= 1.15.21 - Cross-Site Request Forgery to Limited Code Execution via Execute

  Средний 6.3

• CVE-2026-85645без авторизации · нужен клик≤ 1.15.46

  Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.46 - Reflected Cross-Site Scripting

  Средний 6.1

• CVE-2024-10265без авторизации · нужен клик≤ 1.15.30

  Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.30 - Reflected Cross-Site Scripting via add_query_arg Parameter

  Средний 6.1

• CVE-2024-43220без авторизации · нужен клик≤ 1.15.26

  WordPress Form Maker by 10Web plugin <= 1.15.26 - Reflected Cross Site Scripting (XSS) vulnerability

  Средний 6.1

• CVE-2023-45071без авторизации · нужен клик≤ 1.15.18

  WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)

  Средний 6.1

• CVE-2023-45070без авторизации · нужен клик≤ 1.15.18

  WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)

  Средний 6.1

• CVE-2025-48341высокие права≤ 1.15.33

  WordPress Form Maker by 10Web plugin <= 1.15.33 - Cross Site Scripting (XSS) Vulnerability

  Средний 5.9

• CVE-2023-48290без авторизации≤ 1.15.20

  WordPress Form Maker by 10Web plugin <= 1.15.20 - Captcha Bypass Vulnerability vulnerability

  Средний 5.3

• CVE-2026-15993подписчик+≤ 1.15.44

  Form Maker by 10Web <= 1.15.44 - Authenticated (Subscriber+) SQL Injection via '{username}' Placeholder in Dynamic-Choice Field WHERE Clause

  Средний 5.3

• CVE-2026-11777админ≤ 1.15.43

  Form Maker by 10Web <= 1.15.43 - Authenticated (Administrator+) SQL Injection via 'name' Parameter

  Средний 4.9

• CVE-2026-11776админ≤ 1.15.43

  Form Maker by 10Web <= 1.15.43 - Authenticated (Adminsitrator+) SQL Injection via 'groupids' Parameter

  Средний 4.9

• CVE-2026-3330админ≤ 1.15.40

  Form Maker by 10Web <= 1.15.40 - Authenticated (Administrator+) SQL Injection via 'ip_search' Parameter

  Средний 4.9

• CVE-2024-8633админ≤ 1.15.27

  Form Maker <= 1.15.27 - Authenticated (Administrator+) Stored Cross-Site Scripting

  Средний 4.8

• CVE-2024-34437высокие права≤ 1.15.24

  WordPress Form Maker by 10Web plugin <= 1.15.24 - Cross Site Scripting (XSS) vulnerability

  Средний 4.8

• CVE-2024-32534высокие права≤ 1.15.23

  WordPress Form Maker plugin <= 1.15.23 - Cross Site Scripting (XSS) vulnerability

  Средний 4.8