Form Maker by 10Web vulnerabilities
We track 2 vulnerabilities in Form Maker by 10Web products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 4, 2026.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest Form Maker by 10Web vulnerabilities
- 7.5 High severity
Form Maker by 10Web: Improper Neutralization of Input During Web Page Generation
The Form Maker by 10Web WordPress plugin before 1.15.51 does not consistently escape user-submitted field values before rendering them on its submissions admin page, allowing unauthenticated users to store a payload that executes as arbitrary web scripts in th
- 8.1 High severity
Form Maker by 10Web: Improper Neutralization of Special Elements used in an SQL Command
The Form Maker by 10Web WordPress plugin before 1.15.45 does not properly parameterize a user-controlled value that is substituted into a dynamic SQL query built for a database-backed choice field, allowing subscriber-level users to perform second-order SQL in