Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage

10web vulnerabilities

74 published CVEs name 10web among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2026-119483

    WordPress Form Maker by 10Web plugin <= 1.15.50 - Cross Site Scripting (XSS) vulnerability

    10Web · Form Maker by 10Web

    High7.1
  • CVE-2026-118067

    Form Maker by 10Web <= 1.15.50 - Unauthenticated Stored Cross-Site Scripting via disabled_fields Parameter

    10web · Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder

    Medium5.4
  • CVE-2026-120512

    Form Maker by 10Web <= 1.15.50 - Unauthenticated Stored Cross-Site Scripting via Hidden Input Field Value

    10web · Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder

    High7.2
  • CVE-2026-118081

    WordPress 10Web Social Photo Feed plugin <= 1.5.6 - PHP Object Injection vulnerability

    10Web · 10Web Social Photo Feed

    High8.8
  • CVE-2026-103896

    10Web Booster <= 2.34.5 - Unauthenticated Limited File Write / Cache Poisoning via Query-string Parameter Traversal in Page-Cache Path

    10web · 10Web Booster – Website speed optimization, Cache & Page Speed optimizer

    High7.5
  • CVE-2026-18557

    Photo Gallery by 10Web <= 1.8.42 - Reflected Cross-Site Scripting via 'title' Parameter

    10web · Photo Gallery by 10Web – Mobile-Friendly Image Gallery

    Medium6.1
  • CVE-2026-108587

    10Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' Parameter

    10web · 10Web Booster – Website speed optimization, Cache & Page Speed optimizer

    Critical9.8
  • CVE-2026-95808

    Form Maker by 10Web <= 1.15.48 - Unauthenticated SQL Injection via 'inputs' Parameter

    10web · Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder

    High7.5
  • CVE-2026-42715

    WordPress Photo Gallery by 10Web plugin <= 1.8.47 - Cross Site Scripting (XSS) vulnerability

    10Web · Photo Gallery by 10Web

    High7.1
  • CVE-2026-42711

    WordPress Slider by 10Web plugin <= 1.2.63 - Cross Site Scripting (XSS) vulnerability

    10Web · Slider by 10Web

    High7.1
All 74 in the list