Security
فارسی
All products

form-maker

WordPress · Plugin
49 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Form Maker by 10Web <= 1.15.50 - Unauthenticated Stored Cross-Site Scripting via disabled_fields ParameterCVE-2026-118067 form-maker WordPress Medium Fix reported
Form Maker by 10Web <= 1.15.50 - Unauthenticated Stored Cross-Site Scripting via Hidden Input Field ValueCVE-2026-120512 form-maker WordPress High Fix reported
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder < 1.15.51 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-105413 form-maker WordPress High Fix reported
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.49 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-66616 form-maker WordPress High Fix reported
Form Maker by 10Web <= 1.15.48 - Unauthenticated SQL Injection via 'inputs' ParameterCVE-2026-95808 form-maker WordPress High Fix reported
Form Maker by 10Web <= 1.15.48 - Reflected Cross-Site Scripting via 'inputs' Parameter Array KeyCVE-2026-103998 form-maker WordPress Medium Fix reported
Form Maker by 10Web <= 1.15.47 - Unauthenticated Stored Cross-Site Scripting via Mark on Map Longitude/Latitude FieldsCVE-2026-96813 form-maker WordPress High Fix reported
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.46 - Reflected Cross-Site ScriptingCVE-2026-85645 form-maker WordPress Medium Fix reported
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.25 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2024-6130 form-maker WordPress Medium Fix reported
Form Maker by 10Web <= 1.15.44 - Authenticated (Subscriber+) SQL InjectionCVE-2026-16977 form-maker WordPress Medium Fix reported
Form Maker by 10Web <= 1.15.44 - Authenticated (Subscriber+) SQL Injection via '{username}' Placeholder in Dynamic-Choice Field WHERE ClauseCVE-2026-15993 form-maker WordPress Medium Fix reported
Form Maker by 10Web <= 1.15.43 - Authenticated (Adminsitrator+) SQL Injection via 'groupids' ParameterCVE-2026-11776 form-maker WordPress Medium Fix reported
Form Maker by 10Web <= 1.15.43 - Authenticated (Administrator+) SQL Injection via 'name' ParameterCVE-2026-11777 form-maker WordPress Medium Fix reported
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.42 - Unauthenticated SQL Injection via 'inputs'CVE-2026-3359 form-maker WordPress High Fix reported
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder < 1.15.38 - Unauthenticated SQL InjectionCVE-2025-15441 form-maker WordPress High Fix reported
Form Maker by 10Web <= 1.15.40 - Authenticated (Administrator+) SQL Injection via 'ip_search' ParameterCVE-2026-3330 form-maker WordPress Medium Fix reported
Form Maker by 10Web <= 1.15.40 - Unauthenticated Stored Cross-Site Scripting via Matrix Field Text BoxCVE-2026-4388 form-maker WordPress High Fix reported
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.38 - Unauthenticated SQL InjectionCVE-2026-39502 form-maker WordPress High Fix reported
Form Maker by 10Web <= 1.15.35 - Unauthenticated Stored Cross-Site Scripting via Hidden FieldCVE-2026-1058 form-maker WordPress High Fix reported
Form Maker by 10Web <= 1.15.35 - Unauthenticated Stored Cross-Site Scripting via SVG fileCVE-2026-1065 form-maker WordPress High Fix reported