form_maker_by_10web vulnerabilities

CVEs whose affected-version data names the form_maker_by_10web package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-105413High· 7.5

4d ago

Form Maker by 10Web < 1.15.51 - Unauthenticated Stored XSS via Submission Field Values

The Form Maker by 10Web WordPress plugin before 1.15.51 does not consistently escape user-submitted field values before rendering them on its submissions admin page, allowing unauthenticated users to store a payload that executes as arb…

▾ TwilightEPSS 0.27%via CVEORG