Login Request a demo
10
Vendor
10web
23 products with CVEs on record
142
CVEs
0
On KEV
15
New 30D
Products
1B
10Web Booster – Website speed optimization, Cache & Page Speed optimizer
10web
9.8
5 CVEs0 on KEV4 new
FM
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
10web
7.5
12 CVEs0 on KEV3 new
SB
Slider by 10Web
10Web
8.8
4 CVEs0 on KEV3 new
PG
Photo Gallery by 10Web – Mobile-Friendly Image Gallery
10web
6.5
7 CVEs0 on KEV2 new
PG
Photo Gallery by 10Web
10Web
8.8
5 CVEs0 on KEV2 new
1S
10Web Social Photo Feed
10Web
6.5
1 CVEs0 on KEV1 new
PG
Photo Gallery
10web
9.8
49 CVEs0 on KEV0 new
FM
Form Maker
10Web
9.8
25 CVEs0 on KEV0 new
SL
Slider
10web
8.8
9 CVEs0 on KEV0 new
MB
Map Builder For Google Maps
10web
9.8
4 CVEs0 on KEV0 new
1B
10web Booster
10web
9.1
2 CVEs0 on KEV0 new
1M
10Web Map Builder for Google Maps
10web
7.2
2 CVEs0 on KEV0 new
1S
10web Social Post Feed
10web
6.1
2 CVEs0 on KEV0 new
10
10WebAnalytics
10Web
4.3
2 CVEs0 on KEV0 new
FM
Form Maker by 10Web
10Web
9.3
2 CVEs0 on KEV0 new
IO
Image Optimizer
10web
6.1
2 CVEs0 on KEV0 new
SE
Seo
10web
6.1
2 CVEs0 on KEV0 new
WT
Wps Telegram Chat
10web
6.5
2 CVEs0 on KEV0 new
10
10websocial
10web
6.1
1 CVEs0 on KEV0 new
AA
AI Assistant
10web
8.8
1 CVEs0 on KEV0 new
SL
Sliderby10web
10web
4.8
1 CVEs0 on KEV0 new
SP
Spidercalendar
10web
6.1
1 CVEs0 on KEV0 new
SP
Spidercontacts
10web
6.1
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-103896
1B
10Web Booster – Website speed optimization, Cache & Page Speed optimizer
10web
7.5
0%
Oct 1610Web Booster <= 2.34.5 - Unauthenticated Limited File Write / Cache Poisoning via Query-string Parameter Traversal in Page-Cache Path
CVE-2026-18557
PG
Photo Gallery by 10Web – Mobile-Friendly Image Gallery
10web
6.1
0%
Oct 15Photo Gallery by 10Web <= 1.8.42 - Reflected Cross-Site Scripting via 'title' Parameter
CVE-2026-108587
1B
10Web Booster – Website speed optimization, Cache & Page Speed optimizer
10web
9.8
1%
Oct 1510Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' Parameter
CVE-2026-95808
FM
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
10web
7.5
0%
Oct 14Form Maker by 10Web <= 1.15.48 - Unauthenticated SQL Injection via 'inputs' Parameter
CVE-2026-42715
PG
Photo Gallery by 10Web
10Web
7.1
0%
Oct 10WordPress Photo Gallery by 10Web plugin <= 1.8.47 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42711
SB
Slider by 10Web
10Web
7.1
0%
Oct 10WordPress Slider by 10Web plugin <= 1.2.63 - Cross Site Scripting (XSS) vulnerability
CVE-2026-105885
SB
Slider by 10Web
10Web
8.8
0%
Oct 10WordPress Slider by 10Web plugin <= 1.2.62 - PHP Object Injection vulnerability
CVE-2026-107742
1B
10Web Booster – Website speed optimization, Cache & Page Speed optimizer
10web
7.2
0%
Oct 1010Web Booster <= 2.34.8 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name
CVE-2026-103998
FM
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
10web
6.1
0%
Oct 10Form Maker by 10Web <= 1.15.48 - Reflected Cross-Site Scripting via 'inputs' Parameter Array Key
CVE-2026-42710
SB
Slider by 10Web
10Web
7.6
0%
Oct 7WordPress Slider by 10Web plugin <= 1.2.63 - SQL Injection vulnerability
CVE-2026-39787
1S
10Web Social Photo Feed
10Web
6.5
0%
Oct 6WordPress 10Web Social Photo Feed plugin <= 1.4.35 - Broken Access Control vulnerability
CVE-2026-92974
PG
Photo Gallery by 10Web – Mobile-Friendly Image Gallery
10web
6.1
0%
Oct 3Photo Gallery by 10Web <= 1.8.46 - Reflected Cross-Site Scripting via 'thumb_url' Parameter
CVE-2026-96813
FM
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
10web
7.2
0%
Oct 1Form Maker by 10Web <= 1.15.47 - Unauthenticated Stored Cross-Site Scripting via Mark on Map Longitude/Latitude Fields
CVE-2026-102377
PG
Photo Gallery by 10Web
10Web
8.8
0%
Sep 30WordPress Photo Gallery by 10Web plugin <= 1.8.46 - PHP Object Injection vulnerability
CVE-2026-94121
1B
10Web Booster – Website speed optimization, Cache & Page Speed optimizer
10Web
8.8
0%
Sep 30WordPress 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin <= 2.33.6 - PHP Object Injection vulnerability
CVE-2026-85652
PG
Photo Gallery by 10Web – Mobile-Friendly Image Gallery
10web
6.5
1%
Sep 18Photo Gallery by 10Web <= 1.8.44 - Authenticated (Author+) SQL Injection via 'album_id' Shortcode Attribute
CVE-2026-86311
PG
Photo Gallery by 10Web – Mobile-Friendly Image Gallery
10web
6.4
0%
Sep 17Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.44 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
CVE-2026-85645
FM
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
10web
6.1
0%
Sep 10Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.46 - Reflected Cross-Site Scripting
CVE-2026-66616
FM
Form Maker by 10Web
10Web
7.1
0%
Aug 20WordPress Form Maker by 10Web plugin <= 1.15.49 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66635
SB
Slider by 10Web
10Web
7.4
0%
Aug 18WordPress Slider by 10Web plugin <= 1.2.63 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-15993
FM
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
10web
5.3
0%
Aug 15Form Maker by 10Web <= 1.15.44 - Authenticated (Subscriber+) SQL Injection via '{username}' Placeholder in Dynamic-Choice Field WHERE Clause
CVE-2026-11776
FM
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
10web
4.9
0%
Jun 18Form Maker by 10Web <= 1.15.43 - Authenticated (Adminsitrator+) SQL Injection via 'groupids' Parameter
CVE-2026-11777
FM
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
10web
4.9
0%
Jun 18Form Maker by 10Web <= 1.15.43 - Authenticated (Administrator+) SQL Injection via 'name' Parameter
CVE-2026-39502
FM
Form Maker by 10Web
10Web
9.3
0%
Jun 15WordPress Form Maker by 10Web plugin <= 1.15.38 - SQL Injection vulnerability
CVE-2026-9829
PG
Photo Gallery by 10Web – Mobile-Friendly Image Gallery
10web
6.5
0%
Jun 6Photo Gallery by 10Web <= 1.8.41 - Authenticated (Contributor+) SQL Injection via 'compact_album_order_by' Shortcode Parameter
CVE-2026-49771
PG
Photo Gallery by 10Web
10Web
7.6
0%
Jun 4WordPress Photo Gallery by 10Web plugin <= 1.8.41 - SQL Injection vulnerability
CVE-2026-7048
PG
Photo Gallery by 10Web – Mobile-Friendly Image Gallery
10web
6.5
1%
May 28Photo Gallery by 10Web <= 1.8.40 - Authenticated (Contributor+) SQL Injection via 'order_by' Shortcode Attribute
CVE-2018-25346
FM
Form Maker
10Web
7.1
0%
May 23WordPress Form Maker Plugin 1.12.24 SQL Injection via admin-ajax.php
CVE-2026-3359
FM
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
10web
7.5
0%
May 5Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.42 - Unauthenticated SQL Injection via 'inputs'
CVE-2026-3330
FM
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
10web
4.9
0%
Apr 17Form Maker by 10Web <= 1.15.40 - Authenticated (Administrator+) SQL Injection via 'ip_search' Parameter
CVE-2026-4388
FM
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
10web
7.2
0%
Apr 14Form Maker by 10Web <= 1.15.40 - Unauthenticated Stored Cross-Site Scripting via Matrix Field Text Box
CVE-2026-32330
PG
Photo Gallery by 10Web
10Web
4.3
0%
Mar 13WordPress Photo Gallery by 10Web plugin <= 1.8.37 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-27360
PG
Photo Gallery by 10Web
10Web
5.9
0%
Feb 19WordPress Photo Gallery by 10Web plugin <= 1.8.38 - Cross Site Scripting (XSS) vulnerability
CVE-2026-1058
FM
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
10web
7.1
0%
Feb 3Form Maker by 10Web <= 1.15.35 - Unauthenticated Stored Cross-Site Scripting via Hidden Field
CVE-2026-1065
FM
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
10web
7.2
0%
Feb 3Form Maker by 10Web <= 1.15.35 - Unauthenticated Stored Cross-Site Scripting via SVG file
CVE-2026-1036
PG
Photo Gallery by 10Web – Mobile-Friendly Image Gallery
10web
5.3
0%
Jan 21Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.36 - Missing Authorization to Unauthenticated Arbitrary Comment Deletion
CVE-2025-13377
1B
10Web Booster – Website speed optimization, Cache & Page Speed optimizer
10web
8.1
1%
Dec 610Web Booster <= 2.32.7 - Authenticated (Subscriber+) Arbitrary Folder Deletion via two_clear_page_cache
CVE-2020-36853
1M
10Web Map Builder for Google Maps
10web
7.2
0%
Oct 1810WebMapBuilder <= 1.0.63 - Unauthenticated Stored Cross-Site Scripting via Plugin Settings Change
CVE-2024-8670
PG
Photo Gallery
10web
4.8
0%
May 15The Photo Gallery by 10Web WordPress plugin before 1.8.29 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform…
CVE-2024-13053
FM
Form Maker
10web
4.8
0%
May 15The Form Maker by 10Web WordPress plugin before 1.15.33 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored…
CVE-2024-10680
FM
Form Maker
10web
4.8
0%
Apr 16The Form Maker by 10Web WordPress plugin before 1.15.32 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored…
CVE-2025-0613
PG
Photo Gallery
10web
6.1
0%
Mar 31The Photo Gallery by 10Web WordPress plugin before 1.8.34 does not sanitised and escaped comment added on images by unauthenticated users, leading to an Unauthenticated…
CVE-2024-10566
SL
Slider
10web
6.1
0%
Mar 25The Slider by 10Web WordPress plugin before 1.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored…
CVE-2024-10565
SL
Slider
10web
6.1
0%
Mar 25The Slider by 10Web WordPress plugin before 1.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored…
CVE-2024-10560
FM
Form Maker
10web
3.5
0%
Mar 25The Form Maker by 10Web WordPress plugin before 1.15.30 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored…
CVE-2024-13124
PG
Photo Gallery
10web
3.5
0%
Mar 24The Photo Gallery by 10Web WordPress plugin before 1.8.33 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform…
CVE-2024-10558
FM
Form Maker
10web
3.5
0%
Mar 24The Form Maker by 10Web WordPress plugin before 1.15.30 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored…
CVE-2024-13605
FM
Form Maker
10web
4.8
0%
Feb 24The Form Maker by 10Web WordPress plugin before 1.15.33 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored…
CVE-2024-10562
FM
Form Maker
10web
2.7
0%
Jan 7Form Maker by 10Web < 1.15.31 - Admin+ Stored XSS
CVE-2023-45272
1M
10Web Map Builder for Google Maps
10Web
4.3
0%
Jan 2WordPress 10Web Map Builder for Google Maps plugin <= 1.0.73 - Notice Dismissal Vulnerability
CVE-2023-47807
10
10WebAnalytics
10Web
4.3
0%
Jan 2WordPress 10WebAnalytics plugin <= 1.2.12 - Broken Access Control vulnerability
CVE-2023-33995
PG
Photo Gallery
10web
4.3
1%
Dec 13Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo…
CVE-2024-10704
PG
Photo Gallery
10web
4.8
0%
Nov 29The Photo Gallery by 10Web WordPress plugin before 1.8.31 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform…
CVE-2024-10265
FM
Form Maker
10web
6.1
0%
Nov 10The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg…
CVE-2024-9878
PG
Photo Gallery
10web
4.8
0%
Nov 5The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and…
CVE-2024-9630
WT
Wps Telegram Chat
10web
5.3
0%
Oct 25The WPS Telegram Chat plugin for WordPress is vulnerable to authorization bypass due to a missing capability check when accessing messages in versions up to, and including, 4.6.0
CVE-2024-9628
WT
Wps Telegram Chat
10web
6.5
0%
Oct 25The WPS Telegram Chat plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the…
CVE-2024-9607
1S
10web Social Post Feed
10web
6.1
0%
Oct 25The 10Web Social Post Feed plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all…
CVE-2024-5968
PG
Photo Gallery
10web
4.8
0%
Oct 9The Photo Gallery by 10Web WordPress plugin before 1.8.28 does not properly sanitise and escape some of its Gallery settings, which could allow high privilege users such as admin…
CVE-2024-44043
PG
Photo Gallery
10web
4.8
0%
Oct 6Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Photo Gallery by 10Web photo-gallery allows Stored XSS.This issue…