FM
Product
Form Maker
25
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 16Low 3
Watch
Add Form Maker to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-4666 | 9.8 | Oct 16 | The Form Maker by 10Web WordPress plugin before 1.15.20 does not validate signatures when creating them on the server from user input, allowing unauthenticated users to create… Affected: before 1.15.20 |
| CVE-2019-10866 | 9.8 | May 23 | In the Form Maker plugin before 1.13.3 for WordPress, it's possible to achieve SQL injection in the function get_labels_parameters in the file… Affected: before 1.13.3 |
| CVE-2019-11590 | 8.8 | Apr 29 | The 10Web Form Maker plugin before 1.13.5 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file inclusion via directory traversal,… Affected: before 1.13.5 |
| CVE-2024-2112 | 7.5 | Apr 9 | Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.22 - Sensitive Information Exposure Affected: before 1.15.23 |
| CVE-2022-3300 | 7.2 | Oct 25 | Form Maker by 10Web < 1.15.6 - Admin+ SQLI Affected: before 1.15.6 |
| CVE-2018-25346 | 7.1 | May 23 | WordPress Form Maker Plugin 1.12.24 SQL Injection via admin-ajax.php Affected: through 1.12.24 |
| CVE-2024-0667 | 6.3 | Jan 27 | The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,… Affected: through 1.15.21 |
| CVE-2024-10265 | 6.1 | Nov 10 | Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.30 - Reflected Cross-Site Scripting via add_query_arg Parameter Affected: before 1.15.31 |
| CVE-2024-43220 | 6.1 | Aug 12 | WordPress Form Maker by 10Web plugin <= 1.15.26 - Reflected Cross Site Scripting (XSS) vulnerability Affected: before 1.15.27 |
| CVE-2023-45071 | 6.1 | Oct 18 | Unauth. Stored Cross-Site Scripting (XSS) vulnerability in 10Web Form Builder Team Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin <= 1.15.18… Affected: before 1.15.19 |
| CVE-2023-45070 | 6.1 | Oct 18 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in 10Web Form Builder Team Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin <= 1.15.18… Affected: before 1.15.19 |
| CVE-2024-2258 | 5.4 | Apr 27 | Form Maker by 10Web <= 1.15.24 - Authenticated (Subscriber+) Stored Self-Based Cross-Site Scripting Affected: before 1.15.25 |
| CVE-2021-24526 | 5.4 | Aug 16 | The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder WordPress plugin before 1.13.60 does not escape its Form Title before outputting it in an attribute when… Affected: before 1.13.60 |
| CVE-2023-48290 | 5.3 | Jun 4 | WordPress Form Maker by 10Web plugin <= 1.15.20 - Captcha Bypass Vulnerability vulnerability Affected: before 1.15.21 |
| CVE-2024-13053 | 4.8 | May 15 | Form Maker by 10Web < 1.15.33 - Admin+ Stored XSS via Theme Title Affected: before 1.15.33 |
| CVE-2024-10680 | 4.8 | Apr 16 | Form Maker by 10Web < 1.15.32 - Admin+ Stored XSS Affected: before 1.15.32 |
| CVE-2024-13605 | 4.8 | Feb 24 | Form Maker by 10Web < 1.15.33 - Admin+ Stored XSS Affected: before 1.15.33 |
| CVE-2024-8633 | 4.8 | Sep 26 | Form Maker <= 1.15.27 - Authenticated (Administrator+) Stored Cross-Site Scripting Affected: before 1.15.28 |
| CVE-2024-6130 | 4.8 | Jul 1 | Form Maker by 10Web < 1.15.26 - Admin+ Stored XSS Affected: before 1.15.26 |
| CVE-2024-34437 | 4.8 | May 9 | WordPress Form Maker by 10Web plugin <= 1.15.24 - Cross Site Scripting (XSS) vulnerability Affected: before 1.15.25 |
| CVE-2024-32534 | 4.8 | Apr 17 | WordPress Form Maker plugin <= 1.15.23 - Cross Site Scripting (XSS) vulnerability Affected: before 1.15.24 |
| CVE-2022-1564 | 4.8 | May 30 | The Form Maker by 10Web WordPress plugin before 1.14.12 does not sanitize and escape the Custom Text settings, which could allow high privilege user such as admin to perform… Affected: through 1.14.12 |
| CVE-2024-10560 | 3.5 | Mar 25 | Form Maker by 10Web < 1.15.30 - Admin+ Stored XSS Affected: before 1.15.30 |
| CVE-2024-10558 | 3.5 | Mar 24 | Form Maker by 10Web < 1.15.30 - Admin+ Stored XSS Affected: before 1.15.30 |
| CVE-2024-10562 | 2.7 | Jan 7 | Form Maker by 10Web < 1.15.31 - Admin+ Stored XSS Affected: before 1.15.31 |
Showing 25