Login Request a demo
10
Vendor
10web
26 products with CVEs on record
167
CVEs
0
On KEV
16
New 30D
Products
1B
10Web Booster – Website speed optimization, Cache & Page Speed optimizer
10web
9.8
5 CVEs0 on KEV4 new
FM
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
10web
7.5
18 CVEs0 on KEV3 new
SB
Slider by 10Web
10Web
8.8
5 CVEs0 on KEV3 new
PG
Photo Gallery by 10Web – Mobile-Friendly Image Gallery
10web
8.8
14 CVEs0 on KEV2 new
PG
Photo Gallery by 10Web
10Web
8.8
6 CVEs0 on KEV2 new
1S
10Web Social Photo Feed
10Web
8.8
2 CVEs0 on KEV2 new
PG
Photo Gallery
10web
9.8
49 CVEs0 on KEV0 new
FM
Form Maker
10Web
9.8
25 CVEs0 on KEV0 new
SL
Slider
10web
8.8
9 CVEs0 on KEV0 new
PH
PhotoGallery
10Web
6.1
5 CVEs0 on KEV0 new
MB
Map Builder For Google Maps
10web
9.8
4 CVEs0 on KEV0 new
1M
10Web Map Builder for Google Maps
10web
7.2
3 CVEs0 on KEV0 new
FM
Form Maker by 10Web
10Web
9.3
3 CVEs0 on KEV0 new
1B
10web Booster
10web
9.1
2 CVEs0 on KEV0 new
1S
10Web Social Post Feed
10web
6.1
2 CVEs0 on KEV0 new
10
10WebAnalytics
10Web
4.3
2 CVEs0 on KEV0 new
IO
Image Optimizer
10web
6.1
2 CVEs0 on KEV0 new
SE
Seo
10web
6.1
2 CVEs0 on KEV0 new
WT
Wps Telegram Chat
10web
6.5
2 CVEs0 on KEV0 new
1A
10Web AI Assistant – AI content writing assistant
10web
8.8
1 CVEs0 on KEV0 new
10
10websocial
10web
6.1
1 CVEs0 on KEV0 new
AA
AI Assistant
10web
8.8
1 CVEs0 on KEV0 new
SB
Slider by 10Web – Responsive Image Slider
10web
8.8
1 CVEs0 on KEV0 new
SL
Sliderby10web
10web
4.8
1 CVEs0 on KEV0 new
SP
Spidercalendar
10web
6.1
1 CVEs0 on KEV0 new
SP
Spidercontacts
10web
6.1
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-118081
New
1S
10Web Social Photo Feed
10Web
8.8–Oct 29WordPress 10Web Social Photo Feed plugin <= 1.5.6 - PHP Object Injection vulnerability
CVE-2026-103896
1B
10Web Booster – Website speed optimization, Cache & Page Speed optimizer
10web
7.5
0%
Oct 1610Web Booster <= 2.34.5 - Unauthenticated Limited File Write / Cache Poisoning via Query-string Parameter Traversal in Page-Cache Path
CVE-2026-18557
PG
Photo Gallery by 10Web – Mobile-Friendly Image Gallery
10web
6.1
0%
Oct 15Photo Gallery by 10Web <= 1.8.42 - Reflected Cross-Site Scripting via 'title' Parameter
CVE-2026-108587
1B
10Web Booster – Website speed optimization, Cache & Page Speed optimizer
10web
9.8
1%
Oct 1510Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' Parameter
CVE-2026-95808
FM
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
10web
7.5
0%
Oct 14Form Maker by 10Web <= 1.15.48 - Unauthenticated SQL Injection via 'inputs' Parameter
CVE-2026-42715
PG
Photo Gallery by 10Web
10Web
7.1
0%
Oct 10WordPress Photo Gallery by 10Web plugin <= 1.8.47 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42711
SB
Slider by 10Web
10Web
7.1
0%
Oct 10WordPress Slider by 10Web plugin <= 1.2.63 - Cross Site Scripting (XSS) vulnerability
CVE-2026-105885
SB
Slider by 10Web
10Web
8.8
0%
Oct 10WordPress Slider by 10Web plugin <= 1.2.62 - PHP Object Injection vulnerability
CVE-2026-107742
1B
10Web Booster – Website speed optimization, Cache & Page Speed optimizer
10web
7.2
0%
Oct 1010Web Booster <= 2.34.8 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name
CVE-2026-103998
FM
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
10web
6.1
0%
Oct 10Form Maker by 10Web <= 1.15.48 - Reflected Cross-Site Scripting via 'inputs' Parameter Array Key
CVE-2026-42710
SB
Slider by 10Web
10Web
7.6
0%
Oct 7WordPress Slider by 10Web plugin <= 1.2.63 - SQL Injection vulnerability
CVE-2026-39787
1S
10Web Social Photo Feed
10Web
6.5
0%
Oct 6WordPress 10Web Social Photo Feed plugin <= 1.4.35 - Broken Access Control vulnerability
CVE-2026-92974
PG
Photo Gallery by 10Web – Mobile-Friendly Image Gallery
10web
6.1
0%
Oct 3Photo Gallery by 10Web <= 1.8.46 - Reflected Cross-Site Scripting via 'thumb_url' Parameter
CVE-2026-96813
FM
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
10web
7.2
0%
Oct 1Form Maker by 10Web <= 1.15.47 - Unauthenticated Stored Cross-Site Scripting via Mark on Map Longitude/Latitude Fields
CVE-2026-102377
PG
Photo Gallery by 10Web
10Web
8.8
0%
Sep 30WordPress Photo Gallery by 10Web plugin <= 1.8.46 - PHP Object Injection vulnerability
CVE-2026-94121
1B
10Web Booster – Website speed optimization, Cache & Page Speed optimizer
10Web
8.8
0%
Sep 30WordPress 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin <= 2.33.6 - PHP Object Injection vulnerability
CVE-2026-85652
PG
Photo Gallery by 10Web – Mobile-Friendly Image Gallery
10web
6.5
1%
Sep 18Photo Gallery by 10Web <= 1.8.44 - Authenticated (Author+) SQL Injection via 'album_id' Shortcode Attribute
CVE-2026-86311
PG
Photo Gallery by 10Web – Mobile-Friendly Image Gallery
10web
6.4
0%
Sep 17Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.44 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
CVE-2026-85645
FM
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
10web
6.1
0%
Sep 10Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.46 - Reflected Cross-Site Scripting
CVE-2026-66616
FM
Form Maker by 10Web
10Web
7.1
0%
Aug 20WordPress Form Maker by 10Web plugin <= 1.15.49 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66635
SB
Slider by 10Web
10Web
7.4
0%
Aug 18WordPress Slider by 10Web plugin <= 1.2.63 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-15993
FM
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
10web
5.3
0%
Aug 15Form Maker by 10Web <= 1.15.44 - Authenticated (Subscriber+) SQL Injection via '{username}' Placeholder in Dynamic-Choice Field WHERE Clause
CVE-2026-11776
FM
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
10web
4.9
0%
Jun 18Form Maker by 10Web <= 1.15.43 - Authenticated (Adminsitrator+) SQL Injection via 'groupids' Parameter
CVE-2026-11777
FM
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
10web
4.9
0%
Jun 18Form Maker by 10Web <= 1.15.43 - Authenticated (Administrator+) SQL Injection via 'name' Parameter
CVE-2026-39502
FM
Form Maker by 10Web
10Web
9.3
0%
Jun 15WordPress Form Maker by 10Web plugin <= 1.15.38 - SQL Injection vulnerability
CVE-2026-9829
PG
Photo Gallery by 10Web – Mobile-Friendly Image Gallery
10web
6.5
0%
Jun 6Photo Gallery by 10Web <= 1.8.41 - Authenticated (Contributor+) SQL Injection via 'compact_album_order_by' Shortcode Parameter
CVE-2026-49771
PG
Photo Gallery by 10Web
10Web
7.6
0%
Jun 4WordPress Photo Gallery by 10Web plugin <= 1.8.41 - SQL Injection vulnerability
CVE-2026-7048
PG
Photo Gallery by 10Web – Mobile-Friendly Image Gallery
10web
6.5
1%
May 28Photo Gallery by 10Web <= 1.8.40 - Authenticated (Contributor+) SQL Injection via 'order_by' Shortcode Attribute
CVE-2018-25346
FM
Form Maker
10Web
7.1
0%
May 23WordPress Form Maker Plugin 1.12.24 SQL Injection via admin-ajax.php
CVE-2026-3359
FM
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
10web
7.5
0%
May 5Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.42 - Unauthenticated SQL Injection via 'inputs'
CVE-2026-3330
FM
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
10web
4.9
0%
Apr 17Form Maker by 10Web <= 1.15.40 - Authenticated (Administrator+) SQL Injection via 'ip_search' Parameter
CVE-2026-4388
FM
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
10web
7.2
0%
Apr 14Form Maker by 10Web <= 1.15.40 - Unauthenticated Stored Cross-Site Scripting via Matrix Field Text Box
CVE-2026-32330
PG
Photo Gallery by 10Web
10Web
4.3
0%
Mar 13WordPress Photo Gallery by 10Web plugin <= 1.8.37 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-27360
PG
Photo Gallery by 10Web
10Web
5.9
0%
Feb 19WordPress Photo Gallery by 10Web plugin <= 1.8.38 - Cross Site Scripting (XSS) vulnerability
CVE-2026-1058
FM
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
10web
7.1
0%
Feb 3Form Maker by 10Web <= 1.15.35 - Unauthenticated Stored Cross-Site Scripting via Hidden Field
CVE-2026-1065
FM
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
10web
7.2
0%
Feb 3Form Maker by 10Web <= 1.15.35 - Unauthenticated Stored Cross-Site Scripting via SVG file
CVE-2026-1036
PG
Photo Gallery by 10Web – Mobile-Friendly Image Gallery
10web
5.3
0%
Jan 21Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.36 - Missing Authorization to Unauthenticated Arbitrary Comment Deletion
CVE-2025-13377
1B
10Web Booster – Website speed optimization, Cache & Page Speed optimizer
10web
8.1
1%
Dec 610Web Booster <= 2.32.7 - Authenticated (Subscriber+) Arbitrary Folder Deletion via two_clear_page_cache
CVE-2020-36853
1M
10Web Map Builder for Google Maps
10web
7.2
0%
Oct 1810WebMapBuilder <= 1.0.63 - Unauthenticated Stored Cross-Site Scripting via Plugin Settings Change
CVE-2025-48341
FM
Form Maker by 10Web
10Web
5.9
0%
May 19WordPress Form Maker by 10Web plugin <= 1.15.33 - Cross Site Scripting (XSS) Vulnerability
CVE-2024-8670
PG
Photo Gallery
10web
4.8
0%
May 15Photo Gallery by 10Web < 1.8.29 - Admin+ Stored XSS
CVE-2024-13053
FM
Form Maker
10web
4.8
0%
May 15Form Maker by 10Web < 1.15.33 - Admin+ Stored XSS via Theme Title
CVE-2024-10680
FM
Form Maker
10web
4.8
0%
Apr 16Form Maker by 10Web < 1.15.32 - Admin+ Stored XSS
CVE-2025-2269
PG
Photo Gallery by 10Web – Mobile-Friendly Image Gallery
10web
6.1
0%
Apr 11Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.34 Reflected Cross-Site Scripting via 'image_id' Parameter
CVE-2025-0613
PG
Photo Gallery
10web
6.1
0%
Mar 31Photo Gallery < 1.8.34 - Unauthenticated Stored XSS
CVE-2024-10566
SL
Slider
10web
6.1
0%
Mar 25Slider by 10Web < 1.2.62 - Contributor+ Stored XSS
CVE-2024-10565
SL
Slider
10web
6.1
0%
Mar 25Slider by 10Web < 1.2.62 - Admin+ Stored XSS via Widget
CVE-2024-10560
FM
Form Maker
10web
3.5
0%
Mar 25Form Maker by 10Web < 1.15.30 - Admin+ Stored XSS
CVE-2024-13124
PG
Photo Gallery
10web
3.5
0%
Mar 24Photo Gallery by 10Web < 1.8.33 - Admin+ Stored XSS
CVE-2024-10558
FM
Form Maker
10web
3.5
0%
Mar 24Form Maker by 10Web < 1.15.30 - Admin+ Stored XSS
CVE-2024-13605
FM
Form Maker
10web
4.8
0%
Feb 24Form Maker by 10Web < 1.15.33 - Admin+ Stored XSS
CVE-2024-10562
FM
Form Maker
10web
2.7
0%
Jan 7Form Maker by 10Web < 1.15.31 - Admin+ Stored XSS
CVE-2023-45272
1M
10Web Map Builder for Google Maps
10Web
4.3
0%
Jan 2WordPress 10Web Map Builder for Google Maps plugin <= 1.0.73 - Notice Dismissal Vulnerability
CVE-2023-47807
10
10WebAnalytics
10Web
4.3
0%
Jan 2WordPress 10WebAnalytics plugin <= 1.2.12 - Broken Access Control vulnerability
CVE-2023-33995
PG
Photo Gallery
10web
4.3
1%
Dec 13WordPress Photo Gallery by 10Web plugin <= 1.8.15 - Broken Access Control vulnerability
CVE-2024-5020
FM
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
10web
6.4
0%
Dec 4Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library
CVE-2024-10704
PG
Photo Gallery
10web
4.8
0%
Nov 29Photo Gallery by 10Web < 1.8.31 - Admin+ Stored XSS
CVE-2024-10265
FM
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
10web
6.1
0%
Nov 10Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.30 - Reflected Cross-Site Scripting via add_query_arg Parameter
CVE-2024-9878
PG
Photo Gallery by 10Web – Mobile-Friendly Image Gallery
10web
4.8
0%
Nov 5Photo Gallery by 10Web <= 1.8.30 - Authenticated (Administrator+) Stored Cross-Site Scripting
CVE-2024-9628
WT
Wps Telegram Chat
10web
6.5
0%
Oct 25WPS Telegram Chat <= 4.6.0 - Authenticated (Subscriber+) Unauthorized Access to Telegram Bot API