FM
Product
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
12
CVEs
0
On KEV
7.5
Max CVSS
3
New 30D
Severity mix
Critical 0High 6Medium 6Low 0
Watch
Add Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-95808 | 7.5 | Oct 14 | Form Maker by 10Web <= 1.15.48 - Unauthenticated SQL Injection via 'inputs' Parameter Affected: through 1.15.48 |
| CVE-2026-3359 | 7.5 | May 5 | Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.42 - Unauthenticated SQL Injection via 'inputs' Affected: through 1.15.42 |
| CVE-2026-96813 | 7.2 | Oct 1 | Form Maker by 10Web <= 1.15.47 - Unauthenticated Stored Cross-Site Scripting via Mark on Map Longitude/Latitude Fields Affected: through 1.15.47 |
| CVE-2026-4388 | 7.2 | Apr 14 | Form Maker by 10Web <= 1.15.40 - Unauthenticated Stored Cross-Site Scripting via Matrix Field Text Box Affected: through 1.15.40 |
| CVE-2026-1065 | 7.2 | Feb 3 | Form Maker by 10Web <= 1.15.35 - Unauthenticated Stored Cross-Site Scripting via SVG file Affected: through 1.15.35 |
| CVE-2026-1058 | 7.1 | Feb 3 | Form Maker by 10Web <= 1.15.35 - Unauthenticated Stored Cross-Site Scripting via Hidden Field Affected: through 1.15.35 |
Showing 6