10Web Form Maker by 10Web vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting 10Web Form Maker by 10Web: 2 record(s), with affected versions and fixes.
CVE-2026-66616
High · 7.1
CWE-79 Aug 20, 2026
WordPress Form Maker by 10Web plugin <= 1.15.49 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Form Maker by 10Web form-maker allows Stored XSS.This issue affects Form Maker by 10Web: from n/a through 1.15.49.
CVE-2026-39502
Critical · 9.3
CWE-89 Jun 15, 2026
WordPress Form Maker by 10Web plugin <= 1.15.38 - SQL Injection vulnerability
Unauthenticated SQL Injection in Form Maker by 10Web <= 1.15.38 versions.