Log in Start free

10Web

Products

ProductCVEsExploitedLatest
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder20–Nov 7, 2026
Photo Gallery by 10Web – Mobile-Friendly Image Gallery15–Oct 15, 2026
Photo Gallery by 10Web6–Oct 10, 2026
PhotoGallery5–Mar 26, 2024
Slider by 10Web5–Oct 10, 2026
10Web Booster – Website speed optimization, Cache & Page Speed optimizer5–Oct 16, 2026
Form Maker by 10Web3–Aug 20, 2026
10Web Map Builder for Google Maps3–Oct 18, 2025
10WebAnalytics2–Jan 2, 2025
10Web Social Photo Feed2–Oct 29, 2026
WDContactFormBuilder1–Nov 22, 2023
10Web Social Post Feed1–Oct 25, 2024
SEO by 10Web1–Nov 16, 2023
Slider by 10Web – Responsive Image Slider1–Aug 8, 2024
WD WidgetTwitter1–Nov 7, 2023
10Web AI Assistant – AI content writing assistant1–Feb 5, 2024

Exploited and recent CVEs

  • CVE-2026-118067 Medium 5.4 Form Maker by 10Web <= 1.15.50 - Unauthenticated Stored Cross-Site Scripting via disabled_fields Parameter –
  • CVE-2026-120512 High 7.2 Form Maker by 10Web <= 1.15.50 - Unauthenticated Stored Cross-Site Scripting via Hidden Input Field Value –
  • CVE-2026-118081 High 8.8 WordPress 10Web Social Photo Feed plugin <= 1.5.6 - PHP Object Injection vulnerability 0.4%
  • CVE-2026-103896 High 7.5 10Web Booster <= 2.34.5 - Unauthenticated Limited File Write / Cache Poisoning via Query-string Parameter Traversal in Page-Cache Path 0.5%
  • CVE-2026-18557 Medium 6.1 Photo Gallery by 10Web <= 1.8.42 - Reflected Cross-Site Scripting via 'title' Parameter 0.2%
  • CVE-2026-108587 Critical 9.8 10Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' Parameter 0.9%
  • CVE-2026-95808 High 7.5 Form Maker by 10Web <= 1.15.48 - Unauthenticated SQL Injection via 'inputs' Parameter 0.4%
  • CVE-2026-42715 High 7.1 WordPress Photo Gallery by 10Web plugin <= 1.8.47 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-42711 High 7.1 WordPress Slider by 10Web plugin <= 1.2.63 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-105885 High 8.8 WordPress Slider by 10Web plugin <= 1.2.62 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-107742 High 7.2 10Web Booster <= 2.34.8 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name 0.2%
  • CVE-2026-103998 Medium 6.1 Form Maker by 10Web <= 1.15.48 - Reflected Cross-Site Scripting via 'inputs' Parameter Array Key 0.2%
  • CVE-2026-42710 High 7.6 WordPress Slider by 10Web plugin <= 1.2.63 - SQL Injection vulnerability 0.2%
  • CVE-2026-39787 Medium 6.5 WordPress 10Web Social Photo Feed plugin <= 1.4.35 - Broken Access Control vulnerability 0.3%
  • CVE-2026-92974 Medium 6.1 Photo Gallery by 10Web <= 1.8.46 - Reflected Cross-Site Scripting via 'thumb_url' Parameter 0.2%
  • CVE-2026-96813 High 7.2 Form Maker by 10Web <= 1.15.47 - Unauthenticated Stored Cross-Site Scripting via Mark on Map Longitude/Latitude Fields 0.3%
  • CVE-2026-102377 High 8.8 WordPress Photo Gallery by 10Web plugin <= 1.8.46 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-94121 High 8.8 WordPress 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin <= 2.33.6 - PHP Object Injection vulnerability 0.4%
  • CVE-2026-85652 Medium 6.5 Photo Gallery by 10Web <= 1.8.44 - Authenticated (Author+) SQL Injection via 'album_id' Shortcode Attribute 0.6%
  • CVE-2026-86311 Medium 6.4 Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.44 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes 0.3%
  • CVE-2026-85645 Medium 6.1 Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.46 - Reflected Cross-Site Scripting 0.4%
  • CVE-2026-66616 High 7.1 WordPress Form Maker by 10Web plugin <= 1.15.49 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-66635 High 7.4 WordPress Slider by 10Web plugin <= 1.2.63 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2026-15993 Medium 5.3 Form Maker by 10Web <= 1.15.44 - Authenticated (Subscriber+) SQL Injection via '{username}' Placeholder in Dynamic-Choice Field WHERE Clause 0.5%
  • CVE-2026-11776 Medium 4.9 Form Maker by 10Web <= 1.15.43 - Authenticated (Adminsitrator+) SQL Injection via 'groupids' Parameter 0.3%
  • CVE-2026-11777 Medium 4.9 Form Maker by 10Web <= 1.15.43 - Authenticated (Administrator+) SQL Injection via 'name' Parameter 0.3%
  • CVE-2026-39502 Critical 9.3 WordPress Form Maker by 10Web plugin <= 1.15.38 - SQL Injection vulnerability 0.3%
  • CVE-2026-9829 Medium 6.5 Photo Gallery by 10Web <= 1.8.41 - Authenticated (Contributor+) SQL Injection via 'compact_album_order_by' Shortcode Parameter 0.5%
  • CVE-2026-49771 High 7.6 WordPress Photo Gallery by 10Web plugin <= 1.8.41 - SQL Injection vulnerability 0.3%
  • CVE-2026-7048 Medium 6.5 Photo Gallery by 10Web <= 1.8.40 - Authenticated (Contributor+) SQL Injection via 'order_by' Shortcode Attribute 0.5%