WordPress Plugin Vulnerabilities | Page 43 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2024-09-25

Title

Form Maker < 1.15.28 - Authenticated (Administrator+) Stored Cross-Site Scripting

Slug

Published

2024-11-10

Title

Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder < 1.15.31 - Reflected Cross-Site Scripting via add_query_arg Parameter

Slug

Published

2024-12-03

Title

Multiple Plugins - Contributor+ DOM-Based Stored XSS via FancyBox JavaScript Library

Slug

Published

2024-12-17

Title

Form Maker by 10Web < 1.15.31 - Admin+ Stored XSS

Slug

Published

2025-02-03

Title

Form Maker by 10Web < 1.15.33 - Admin+ Stored XSS

Slug

Published

2024-12-30

Title

Form Maker by 10Web < 1.15.33 - Admin+ Stored XSS via Theme Title

Slug

Published

2025-03-02

Title

Form Maker by 10Web < 1.15.30 - Admin+ Stored XSS

Slug

Published

2025-03-03

Title

Form Maker by 10Web < 1.15.30 - Admin+ Stored XSS

Slug

Published

2025-03-26

Title

Form Maker by 10Web < 1.15.32 - Admin+ Stored XSS

Slug

Published

2025-05-19

Title

Form Maker by 10Web < 1.15.34 - Admin+ Stored XSS

Slug

Published

2026-02-02

Title

Form Maker by 10Web < 1.15.36 - Unauthenticated Stored Cross-Site Scripting via SVG file

Slug

Published

2026-02-02

Title

Form Maker by 10Web < 1.15.36 - Unauthenticated Stored Cross-Site Scripting via Hidden Field

Slug

Published

2026-03-23

Title

Form Maker < 1.15.38 - SQL Injection

Slug

Published

2026-04-13

Title

Form Maker by 10Web < 1.15.41 - Unauthenticated Stored Cross-Site Scripting via Matrix Field Text Box

Slug

Published

2026-04-08

Title

Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder < 1.15.39 - Unauthenticated SQL Injection

Slug

Published

2026-04-16

Title

Form Maker by 10Web < 1.15.41 - Authenticated (Administrator+) SQL Injection via 'ip_search' Parameter

Slug

Published

2026-05-04

Title

Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder < 1.15.43 - Unauthenticated SQL Injection via 'inputs'

Slug

Published

2026-06-17

Title

Form Maker by 10Web < 1.15.44 - Authenticated (Administrator+) SQL Injection via 'name' Parameter

Slug

Published

2026-06-17

Title

Form Maker by 10Web < 1.15.44 - Authenticated (Adminsitrator+) SQL Injection via 'groupids' Parameter

Slug

Published

2026-08-10

Title

Form Maker by 10Web < 1.15.45 - Subscriber+ SQL Injection via display_name

Slug

Published

2026-08-14

Title

Form Maker by 10Web < 1.15.45 - Authenticated (Subscriber+) SQL Injection via '{username}' Placeholder in Dynamic-Choice Field WHERE Clause

Slug

Published

2026-08-19

Title

Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder < 1.15.50 - Unauthenticated Stored Cross-Site Scripting

Slug

Published

2026-09-09

Title

Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder < 1.15.47 - Reflected Cross-Site Scripting

Slug

Published

2026-09-30

Title

Form Maker by 10Web < 1.15.48 - Unauthenticated Stored Cross-Site Scripting via Mark on Map Longitude/Latitude Fields

Slug

Published

2026-10-09

Title

Form Maker by 10Web < 1.15.49 - Reflected Cross-Site Scripting via 'inputs' Parameter Array Key