Login Request a demo
FM
Product
Form Maker
by 10Web · last CVE May 23, 2026
25
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities25In the news0Timeline
Severity mix
Critical 2High 4Medium 16Low 3
Severity
All severities25Critical2High4Medium16Low3
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Form Maker to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-0667
6.3
0%
Jan 27
Form-Maker (twb_form-maker) <= 1.15.21 - Cross-Site Request Forgery to Limited Code Execution via Execute
Affected: through 1.15.21
CVE-2024-10265
6.1
0%
Nov 10
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.30 - Reflected Cross-Site Scripting via add_query_arg Parameter
Affected: before 1.15.31
CVE-2024-43220
6.1
0%
Aug 12
WordPress Form Maker by 10Web plugin <= 1.15.26 - Reflected Cross Site Scripting (XSS) vulnerability
Affected: before 1.15.27
CVE-2023-45071
6.1
0%
Oct 18
WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)
Affected: before 1.15.19
CVE-2023-45070
6.1
0%
Oct 18
WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)
Affected: before 1.15.19
CVE-2024-2258
5.4
0%
Apr 27
Form Maker by 10Web <= 1.15.24 - Authenticated (Subscriber+) Stored Self-Based Cross-Site Scripting
Affected: before 1.15.25
CVE-2021-24526
5.4
1%
Aug 16
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder WordPress plugin before 1.13.60 does not escape its Form Title before outputting it in an attribute when…
Affected: before 1.13.60
CVE-2023-48290
5.3
0%
Jun 4
WordPress Form Maker by 10Web plugin <= 1.15.20 - Captcha Bypass Vulnerability vulnerability
Affected: before 1.15.21
CVE-2024-13053
4.8
0%
May 15
Form Maker by 10Web < 1.15.33 - Admin+ Stored XSS via Theme Title
Affected: before 1.15.33
CVE-2024-10680
4.8
0%
Apr 16
Form Maker by 10Web < 1.15.32 - Admin+ Stored XSS
Affected: before 1.15.32
CVE-2024-13605
4.8
0%
Feb 24
Form Maker by 10Web < 1.15.33 - Admin+ Stored XSS
Affected: before 1.15.33
CVE-2024-8633
4.8
0%
Sep 26
Form Maker <= 1.15.27 - Authenticated (Administrator+) Stored Cross-Site Scripting
Affected: before 1.15.28
CVE-2024-6130
4.8
0%
Jul 1
Form Maker by 10Web < 1.15.26 - Admin+ Stored XSS
Affected: before 1.15.26
CVE-2024-34437
4.8
0%
May 9
WordPress Form Maker by 10Web plugin <= 1.15.24 - Cross Site Scripting (XSS) vulnerability
Affected: before 1.15.25
CVE-2024-32534
4.8
0%
Apr 17
WordPress Form Maker plugin <= 1.15.23 - Cross Site Scripting (XSS) vulnerability
Affected: before 1.15.24
CVE-2022-1564
4.8
1%
May 30
The Form Maker by 10Web WordPress plugin before 1.14.12 does not sanitize and escape the Custom Text settings, which could allow high privilege user such as admin to perform…
Affected: through 1.14.12
Showing 16