10Web Form Maker vulnerabilities, page 2

25 vulnerabilities

Known vulnerabilities in 10Web Form Maker, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2019-1086610webform_maker+1
EPSS score
6.21%
In the Form Maker plugin before 1.13.3 for WordPress, it's possible to achieve SQL injection in the function get_labels_parameters in the file form-maker/admin/models/Submissions_fm.php with a crafted value of the /models/Submissioc parameter.5.3CVE-2023-4829010web form builder teamform maker by 10web+2
EPSS score
0.37%
Improper Restriction of Excessive Authentication Attempts vulnerability in 10Web Form Builder Team Form Maker by 10Web allows Functionality Bypass.This issue affects Form Maker by 10Web: from n/a through 1.15.20.9.8CVE-2023-466610webform_maker+2
EPSS score
3.78%
The Form Maker by 10Web WordPress plugin before 1.15.20 does not validate signatures when creating them on the server from user input, allowing unauthenticated users to create arbitrary files and lead to RCE7.1CVE-2023-4507010web form builder teamform maker by 10web – mobile-friendly drag & drop contact form builder+2
EPSS score
0.41%
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in 10Web Form Builder Team Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin <= 1.15.18 versions.7.2CVE-2023-4507110web form builder teamform maker by 10web – mobile-friendly drag & drop contact form builder+2
EPSS score
0.38%
Unauth. Stored Cross-Site Scripting (XSS) vulnerability in 10Web Form Builder Team Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin <= 1.15.18 versions.