en
Form Maker by 10Web is a WordPress plugin that delivers drag-and-drop form-building for websites and user interactions; it is deployed as a plugin within WordPress environments and is used by site owners and developers.
As of 10/25/2026, 10web recorded 21 security vulnerabilities in the last 90 days across 7 products, including 13 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder had the most security vulnerabilities in the 10web ecosystem, with 5 vulnerabilities—approximately 23.81% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-10389610Web Booster <= 2.34.5 - Unauthenticated Limited File Write / Cache Poisoning via Query-string Parameter Traversal in Page-Cache PathCVE-2026-18557Photo Gallery by 10Web <= 1.8.42 - Reflected Cross-Site Scripting via 'title' ParameterCVE-2026-10858710Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' ParameterCVE-2026-95808Form Maker by 10Web <= 1.15.48 - Unauthenticated SQL Injection via 'inputs' ParameterCVE-2026-42715WordPress Photo Gallery by 10Web plugin <= 1.8.47 - Cross Site Scripting (XSS) vulnerability146 Results | Page 1 of 15
| SeverityMedium |
| SeverityCritical |
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |
| SeverityMedium |
| SeverityHigh |