Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder

Güvenlik açıkları

• CVE-2019-10866kimlik doğrulamasız

  In the Form Maker plugin before 1.13.3 for WordPress, it's possible to achieve SQL injection in the function get_labels_parameters in the fi

  Kritik 9.8

• CVE-2026-39502kimlik doğrulamasız≤ 1.15.38

  WordPress Form Maker by 10Web plugin <= 1.15.38 - SQL Injection vulnerability

  Kritik 9.3

• CVE-2019-11590kimlik doğrulamasız · tıklama gerekir

  The 10Web Form Maker plugin before 1.13.5 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local f

  Yüksek 8.8

• CVE-2018-10504kimlik doğrulamasız · tıklama gerekir

  The WebDorado "Form Maker by WD" plugin before 1.12.24 for WordPress allows CSV injection.

  Yüksek 7.8

• CVE-2026-3359kimlik doğrulamasız≤ 1.15.42

  Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.42 - Unauthenticated SQL Injection via 'inputs'

  Yüksek 7.5

• CVE-2026-96813kimlik doğrulamasız≤ 1.15.47

  Form Maker by 10Web <= 1.15.47 - Unauthenticated Stored Cross-Site Scripting via Mark on Map Longitude/Latitude Fields

  Yüksek 7.2

• CVE-2026-4388kimlik doğrulamasız≤ 1.15.40

  Form Maker by 10Web <= 1.15.40 - Unauthenticated Stored Cross-Site Scripting via Matrix Field Text Box

  Yüksek 7.2

• CVE-2026-1065kimlik doğrulamasız≤ 1.15.35

  Form Maker by 10Web <= 1.15.35 - Unauthenticated Stored Cross-Site Scripting via SVG file

  Yüksek 7.2

• CVE-2026-66616kimlik doğrulamasız · tıklama gerekiryama görünmüyor

  WordPress Form Maker by 10Web plugin <= 1.15.48 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2026-1058kimlik doğrulamasız · tıklama gerekir≤ 1.15.35

  Form Maker by 10Web <= 1.15.35 - Unauthenticated Stored Cross-Site Scripting via Hidden Field

  Yüksek 7.1

• CVE-2024-0667kimlik doğrulamasız · tıklama gerekir≤ 1.15.21

  Form-Maker (twb_form-maker) <= 1.15.21 - Cross-Site Request Forgery to Limited Code Execution via Execute

  Orta 6.3

• CVE-2026-85645kimlik doğrulamasız · tıklama gerekir≤ 1.15.46

  Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.46 - Reflected Cross-Site Scripting

  Orta 6.1

• CVE-2024-10265kimlik doğrulamasız · tıklama gerekir≤ 1.15.30

  Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.30 - Reflected Cross-Site Scripting via add_query_arg Parameter

  Orta 6.1

• CVE-2024-43220kimlik doğrulamasız · tıklama gerekir≤ 1.15.26

  WordPress Form Maker by 10Web plugin <= 1.15.26 - Reflected Cross Site Scripting (XSS) vulnerability

  Orta 6.1

• CVE-2023-45071kimlik doğrulamasız · tıklama gerekir≤ 1.15.18

  WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)

  Orta 6.1

• CVE-2023-45070kimlik doğrulamasız · tıklama gerekir≤ 1.15.18

  WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)

  Orta 6.1

• CVE-2025-48341yüksek yetki≤ 1.15.33

  WordPress Form Maker by 10Web plugin <= 1.15.33 - Cross Site Scripting (XSS) Vulnerability

  Orta 5.9

• CVE-2023-48290kimlik doğrulamasız≤ 1.15.20

  WordPress Form Maker by 10Web plugin <= 1.15.20 - Captcha Bypass Vulnerability vulnerability

  Orta 5.3

• CVE-2026-15993abone+≤ 1.15.44

  Form Maker by 10Web <= 1.15.44 - Authenticated (Subscriber+) SQL Injection via '{username}' Placeholder in Dynamic-Choice Field WHERE Clause

  Orta 5.3

• CVE-2026-11777yönetici≤ 1.15.43

  Form Maker by 10Web <= 1.15.43 - Authenticated (Administrator+) SQL Injection via 'name' Parameter

  Orta 4.9

• CVE-2026-11776yönetici≤ 1.15.43

  Form Maker by 10Web <= 1.15.43 - Authenticated (Adminsitrator+) SQL Injection via 'groupids' Parameter

  Orta 4.9

• CVE-2026-3330yönetici≤ 1.15.40

  Form Maker by 10Web <= 1.15.40 - Authenticated (Administrator+) SQL Injection via 'ip_search' Parameter

  Orta 4.9

• CVE-2024-8633yönetici≤ 1.15.27

  Form Maker <= 1.15.27 - Authenticated (Administrator+) Stored Cross-Site Scripting

  Orta 4.8

• CVE-2024-34437yüksek yetki≤ 1.15.24

  WordPress Form Maker by 10Web plugin <= 1.15.24 - Cross Site Scripting (XSS) vulnerability

  Orta 4.8

• CVE-2024-32534yüksek yetki≤ 1.15.23

  WordPress Form Maker plugin <= 1.15.23 - Cross Site Scripting (XSS) vulnerability

  Orta 4.8