Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder

28 known CVEs 30K+ active installs

Scan My Site Free
UNKNOWN: 28
Known Vulnerabilities 28
CVE-2026-85645 UNKNOWN EPSS 0.3%
Published 2026-09-10 · Affected: ≤1.15.46 · Fixed in 1.15.46
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the bulk_action parameter in all versions up to, and
CVE-2026-85645 UNKNOWN EPSS 0.3%
Published 2026-09-10 · Affected: ≤1.15.46 · Fixed in 1.15.46
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the bulk_action parameter in all versions up to, and
CVE-2026-85645 UNKNOWN EPSS 0.3%
Published 2026-09-10 · Affected: ≤1.15.46 · Fixed in 1.15.46
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the bulk_action parameter in all versions up to, and
CVE-2026-85645 UNKNOWN EPSS 0.3%
Published 2026-09-10 · Affected: ≤1.15.46 · Fixed in 1.15.46
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the bulk_action parameter in all versions up to, and
CVE-2026-85645 UNKNOWN EPSS 0.3%
Published 2026-09-10 · Affected: ≤1.15.46 · Fixed in 1.15.46
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the bulk_action parameter in all versions up to, and
CVE-2026-85645 UNKNOWN EPSS 0.3%
Published 2026-09-10 · Affected: ≤1.15.46 · Fixed in 1.15.46
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the bulk_action parameter in all versions up to, and
CVE-2026-85645 UNKNOWN EPSS 0.3%
Published 2026-09-10 · Affected: ≤1.15.46 · Fixed in 1.15.46
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the bulk_action parameter in all versions up to, and
CVE-2026-85645 UNKNOWN EPSS 0.3%
Published 2026-09-10 · Affected: ≤1.15.46 · Fixed in 1.15.46
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the bulk_action parameter in all versions up to, and
CVE-2026-85645 UNKNOWN EPSS 0.3%
Published 2026-09-10 · Affected: ≤1.15.46 · Fixed in 1.15.46
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the bulk_action parameter in all versions up to, and
CVE-2026-85645 UNKNOWN EPSS 0.3%
Published 2026-09-10 · Affected: ≤1.15.46 · Fixed in 1.15.46
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the bulk_action parameter in all versions up to, and
CVE-2026-85645 UNKNOWN EPSS 0.3%
Published 2026-09-10 · Affected: ≤1.15.46 · Fixed in 1.15.46
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the bulk_action parameter in all versions up to, and
CVE-2026-85645 UNKNOWN EPSS 0.3%
Published 2026-09-10 · Affected: ≤1.15.46 · Fixed in 1.15.46
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the bulk_action parameter in all versions up to, and
CVE-2026-85645 UNKNOWN EPSS 0.3%
Published 2026-09-10 · Affected: ≤1.15.46 · Fixed in 1.15.46
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the bulk_action parameter in all versions up to, and
CVE-2026-85645 UNKNOWN EPSS 0.3%
Published 2026-09-10 · Affected: ≤1.15.46 · Fixed in 1.15.46
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the bulk_action parameter in all versions up to, and
CVE-2026-85645 UNKNOWN EPSS 0.3%
Published 2026-09-10 · Affected: ≤1.15.46 · Fixed in 1.15.46
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the bulk_action parameter in all versions up to, and
CVE-2026-85645 UNKNOWN EPSS 0.3%
Published 2026-09-10 · Affected: ≤1.15.46 · Fixed in 1.15.46
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the bulk_action parameter in all versions up to, and
CVE-2026-85645 UNKNOWN EPSS 0.3%
Published 2026-09-10 · Affected: ≤1.15.46 · Fixed in 1.15.46
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the bulk_action parameter in all versions up to, and
CVE-2026-85645 UNKNOWN EPSS 0.3%
Published 2026-09-10 · Affected: ≤1.15.46 · Fixed in 1.15.46
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the bulk_action parameter in all versions up to, and
CVE-2026-3330 UNKNOWN EPSS 0.4%
Published 2026-04-17 · Affected: See advisory
The Form Maker by 10Web plugin for WordPress is vulnerable to SQL Injection via the 'ip_search', 'startdate', 'enddate', 'username_search', and 'useremail_search' parameters in all versions up to, and
CVE-2026-4388 UNKNOWN EPSS 0.2%
Published 2026-04-14 · Affected: See advisory
The Form Maker by 10Web plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Matrix field (Text Box input type) in form submissions in all versions up to, and including, 1.15.40.
CVE-2026-1065 UNKNOWN EPSS 0.3%
Published 2026-02-03 · Affected: See advisory
The Form Maker by 10Web plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.15.35. This is due to the plugin's default file upload allowlist inclu
CVE-2026-1058 UNKNOWN EPSS 0.3%
Published 2026-02-03 · Affected: See advisory
The Form Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via hidden field values in all versions up to, and including, 1.15.35. This is due to insufficient output escaping when
CVE-2024-2258 UNKNOWN EPSS 0.3%
Published 2024-04-27 · Affected: See advisory
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a user's display name autofilled into forms in all vers
CVE-2024-2258 UNKNOWN EPSS 0.3%
Published 2024-04-27 · Affected: See advisory
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a user's display name autofilled into forms in all vers
CVE-2024-2112 UNKNOWN EPSS 0.5%
Published 2024-04-09 · Affected: See advisory
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.15.22 via the si
CVE-2024-2112 UNKNOWN EPSS 0.5%
Published 2024-04-09 · Affected: See advisory
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.15.22 via the si
CVE-2024-0667 UNKNOWN EPSS 0.1%
Published 2024-01-27 · Affected: See advisory
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.15.21. This is due t
CVE-2024-0667 UNKNOWN EPSS 0.1%
Published 2024-01-27 · Affected: See advisory
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.15.21. This is due t

Is Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder running on your site?

A free scan detects your plugins and flags any that match these CVEs.

Scan My Site Free