10web vulnerabilities
74 CVEs and advisories name 10web as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-119483WordPress Form Maker by 10Web plugin <= 1.15.50 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-118067Form Maker by 10Web <= 1.15.50 - Unauthenticated Stored Cross-Site Scripting via disabled_fields Parameter
- CVE-2026-120512Form Maker by 10Web <= 1.15.50 - Unauthenticated Stored Cross-Site Scripting via Hidden Input Field Value
- CVE-2026-118081WordPress 10Web Social Photo Feed plugin <= 1.5.6 - PHP Object Injection vulnerability
- CVE-2026-10389610Web Booster <= 2.34.5 - Unauthenticated Limited File Write / Cache Poisoning via Query-string Parameter Traversal in Page-Cache Path
- CVE-2026-18557Photo Gallery by 10Web <= 1.8.42 - Reflected Cross-Site Scripting via 'title' Parameter
- CVE-2026-10858710Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' Parameter
- CVE-2026-95808Form Maker by 10Web <= 1.15.48 - Unauthenticated SQL Injection via 'inputs' Parameter
- CVE-2026-42715WordPress Photo Gallery by 10Web plugin <= 1.8.47 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-42711WordPress Slider by 10Web plugin <= 1.2.63 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-105885WordPress Slider by 10Web plugin <= 1.2.62 - PHP Object Injection vulnerability
- CVE-2026-10774210Web Booster <= 2.34.8 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name
- CVE-2026-103998Form Maker by 10Web <= 1.15.48 - Reflected Cross-Site Scripting via 'inputs' Parameter Array Key
- CVE-2026-42710WordPress Slider by 10Web plugin <= 1.2.63 - SQL Injection vulnerability
- CVE-2026-39787WordPress 10Web Social Photo Feed plugin <= 1.4.35 - Broken Access Control vulnerability
- CVE-2026-92974Photo Gallery by 10Web <= 1.8.46 - Reflected Cross-Site Scripting via 'thumb_url' Parameter
- CVE-2026-96813Form Maker by 10Web <= 1.15.47 - Unauthenticated Stored Cross-Site Scripting via Mark on Map Longitude/Latitude Fields
- CVE-2026-102377WordPress Photo Gallery by 10Web plugin <= 1.8.46 - PHP Object Injection vulnerability
- CVE-2026-94121WordPress 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin <= 2.33.6 - PHP Object Injection vulnerability
- CVE-2026-85652Photo Gallery by 10Web <= 1.8.44 - Authenticated (Author+) SQL Injection via 'album_id' Shortcode Attribute
- CVE-2026-86311Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.44 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
- CVE-2026-85645Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.46 - Reflected Cross-Site Scripting
- CVE-2026-66616WordPress Form Maker by 10Web plugin <= 1.15.49 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-66635WordPress Slider by 10Web plugin <= 1.2.63 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2026-15993Form Maker by 10Web <= 1.15.44 - Authenticated (Subscriber+) SQL Injection via '{username}' Placeholder in Dynamic-Choice Field WHERE Clause
- CVE-2026-11776Form Maker by 10Web <= 1.15.43 - Authenticated (Adminsitrator+) SQL Injection via 'groupids' Parameter
- CVE-2026-11777Form Maker by 10Web <= 1.15.43 - Authenticated (Administrator+) SQL Injection via 'name' Parameter
- CVE-2026-39502WordPress Form Maker by 10Web plugin <= 1.15.38 - SQL Injection vulnerability
- CVE-2026-9829Photo Gallery by 10Web <= 1.8.41 - Authenticated (Contributor+) SQL Injection via 'compact_album_order_by' Shortcode Parameter
- CVE-2026-49771WordPress Photo Gallery by 10Web plugin <= 1.8.41 - SQL Injection vulnerability