Form Maker vulnerabilities

2 known vulnerabilities in Form Maker from 10Web. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Form Maker by 10Web – Mobile-Friendly Drag &…: Improper Authentication

  CVE-2024-2112Apr 9, 202410Web

  The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.15.22 via the signature functionality. This makes it possible for unauthenti

• 7.2 High severity

  Form Maker by 10Web – Mobile-Friendly Drag &…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-3300Oct 25, 2022Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form BuilderEPSS 1.41%

  The Form Maker by 10Web WordPress plugin before 1.15.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin