Form Maker by 10Web
10Web
Developer
1.15.47
Latest version
30,000
Installations
No date
Last updated
Vulnerability history
1 present
41 patched
14 Mitigation rules
- Cross Site Scripting (XSS) vulnerability<= 1.15.4719/08/2026
- Authenticated (Subscriber+) SQL Injection via '{username}' Placeholder in Dynamic-Choice Field WHERE Clause vulnerability<= 1.15.4417/08/2026
- Subscriber+ SQL Injection via display_name vulnerability< 1.15.4514/08/2026
- Authenticated (Adminsitrator+) SQL Injection vulnerability<= 1.15.4317/06/2026
- Authenticated (Administrator+) SQL Injection vulnerability<= 1.15.4317/06/2026
- Unauthenticated SQL Injection vulnerability<= 1.15.4205/05/2026
- Authenticated (Administrator+) SQL Injection via 'ip_search' Parameter vulnerability<= 1.15.4017/04/2026
- Unauthenticated Stored Cross-Site Scripting via Matrix Field Text Box vulnerability<= 1.15.4016/04/2026
- SQL Injection vulnerability< 1.15.3814/04/2026
- SQL Injection vulnerability<= 1.15.3808/04/2026
- Unauthenticated Stored Cross-Site Scripting via Hidden Field vulnerability<= 1.15.3506/02/2026
- Unauthenticated Stored Cross-Site Scripting via SVG file vulnerability<= 1.15.3506/02/2026
- Admin+ Stored XSS vulnerability< 1.15.3131/12/2025
- Admin+ Stored XSS via Theme Title vulnerability< 1.15.3327/05/2025
- Cross Site Scripting (XSS) Vulnerability<= 1.15.3319/05/2025
- Admin+ Stored XSS vulnerability< 1.15.3216/04/2025
- Admin+ Stored XSS vulnerability< 1.15.3024/03/2025
- Admin+ Stored XSS vulnerability< 1.15.3324/02/2025
- Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library<= 1.15.2703/12/2024
- Reflected Cross-Site Scripting via add_query_arg Parameter vulnerability<= 1.15.3011/11/2024
- Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability<= 1.15.2726/09/2024
- Reflected Cross Site Scripting (XSS) vulnerability<= 1.15.2609/08/2024
- Admin+ Stored XSS vulnerability< 1.15.2601/07/2024
- Cross Site Scripting (XSS) vulnerability<= 1.15.2407/05/2024
- Authenticated (Subscriber+) Stored Self-Based Cross-Site Scripting vulnerability<= 1.15.2429/04/2024
- Cross Site Scripting (XSS) vulnerability<= 1.15.2315/04/2024
- Sensitive Information Exposure vulnerability<= 1.15.2225/03/2024
- Cross-Site Request Forgery to Limited Code Execution via Execute vulnerability<= 1.15.2129/01/2024
- Captcha Bypass Vulnerability vulnerability<= 1.15.2023/11/2023
- Cross Site Scripting (XSS) vulnerability<= 1.15.1803/10/2023
- Reflected Cross Site Scripting (XSS) vulnerability<= 1.15.1803/10/2023
- Unauthenticated Arbitrary File Upload Vulnerability< 1.15.2007/09/2023
- Authenticated SQL Injection (SQLi) vulnerability<= 1.15.503/10/2022
- Stored Cross-Site Scripting (XSS) vulnerability<= 1.14.1109/05/2022
- Authenticated Stored Cross-Site Scripting (XSS) vulnerability<= 1.13.5915/07/2021
- Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities<= 1.13.5619/05/2021
- Authenticated Reflected Cross-Site Scripting (XSS) vulnerability<= 1.13.5619/05/2021
- Authenticated Reflected Cross-Site Scripting (XSS) vulnerability<= 1.13.3912/07/2020
- Authenticated SQL Injection (SQLi) vulnerability<= 1.13.3526/05/2020
- Authenticated SQL Injection (SQLi) vulnerability<= 1.13.225/05/2019
- Cross-Site Request Forgery (CSRF) vulnerability<= 1.13.410/04/2019
- Unspecified Cross Site Scripting<= 1.6.401/08/2014