WordPress Plugin Vulnerabilities | Page 37 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2023-10-03

Title

Form Maker by 10Web < 1.15.19 - Reflected XSS

Slug

Published

2023-10-11

Title

Form Maker < 1.15.21 - Captcha Bypass

Slug

Published

2024-01-26

Title

Form-Maker (twb_form-maker) < 1.15.22 - CSRF to limited RCE

Slug

Published

2024-03-22

Title

Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder < 1.15.23 - Sensitive Information Exposure

Slug

Published

2024-04-15

Title

Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder < 1.15.24 - Authenticated (Admin+) Stored Cross-Site Scripting

Slug

Published

2024-04-26

Title

Form Maker by 10Web < 1.15.25 - Authenticated (Subscriber+) Stored Self-Based Cross-Site Scripting

Slug

Published

2024-05-07

Title

Form Maker by 10Web < 1.15.25 - Authenticated (Administrator+) Stored Cross-Site Scripting

Slug

Published

2024-06-10

Title

Form Maker by 10Web < 1.15.26 - Admin+ Stored XSS

Slug

Published

2024-08-09

Title

Form Maker by 10Web < 1.15.27 - Reflected Cross-Site Scripting

Slug

Published

2024-09-25

Title

Form Maker < 1.15.28 - Authenticated (Administrator+) Stored Cross-Site Scripting

Slug

Published

2024-11-10

Title

Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder < 1.15.31 - Reflected Cross-Site Scripting via add_query_arg Parameter

Slug

Published

2024-12-03

Title

Multiple Plugins - Contributor+ DOM-Based Stored XSS via FancyBox JavaScript Library

Slug

Published

2024-12-17

Title

Form Maker by 10Web < 1.15.31 - Admin+ Stored XSS

Slug

Published

2025-02-03

Title

Form Maker by 10Web < 1.15.33 - Admin+ Stored XSS

Slug

Published

2024-12-30

Title

Form Maker by 10Web < 1.15.33 - Admin+ Stored XSS via Theme Title

Slug

Published

2025-03-02

Title

Form Maker by 10Web < 1.15.30 - Admin+ Stored XSS

Slug

Published

2025-03-03

Title

Form Maker by 10Web < 1.15.30 - Admin+ Stored XSS

Slug

Published

2025-03-26

Title

Form Maker by 10Web < 1.15.32 - Admin+ Stored XSS

Slug

Published

2025-05-19

Title

Form Maker by 10Web < 1.15.34 - Admin+ Stored XSS

Slug

Published

2026-02-02

Title

Form Maker by 10Web < 1.15.36 - Unauthenticated Stored Cross-Site Scripting via SVG file

Slug

Published

2026-02-02

Title

Form Maker by 10Web < 1.15.36 - Unauthenticated Stored Cross-Site Scripting via Hidden Field

Slug

Published

2026-03-23

Title

Form Maker < 1.15.38 - SQL Injection

Slug

Published

2026-04-13

Title

Form Maker by 10Web < 1.15.41 - Unauthenticated Stored Cross-Site Scripting via Matrix Field Text Box

Slug

Published

2026-04-08

Title

Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder < 1.15.39 - Unauthenticated SQL Injection

Slug

Published

2026-04-16

Title

Form Maker by 10Web < 1.15.41 - Authenticated (Administrator+) SQL Injection via 'ip_search' Parameter