10Web Form Maker 1.13.5 for WordPress

In the Form Maker plugin before 1.13.3 for WordPress, it's possible to achieve SQL injection in the function get_labels_parameters in the file form-maker/admin/models/Submissions_fm.php with a crafted value of the /models/Submissioc parameter.

Form-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload

The 10Web Form Maker plugin before 1.13.5 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file inclusion via directory traversal, because there can be a discrepancy between the $_POST['action'] value and the $_GET['action'] value, and the latter is unsanitized.

Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.22 - Sensitive Information Exposure

Form Maker by 10Web < 1.15.6 - Admin+ SQLI

WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)

WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)

WordPress Form Maker by 10Web plugin <= 1.15.26 - Reflected Cross Site Scripting (XSS) vulnerability

Form-Maker (twb_form-maker) <= 1.15.21 - Cross-Site Request Forgery to Limited Code Execution via Execute

Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.30 - Reflected Cross-Site Scripting via add_query_arg Parameter

WordPress Form Maker by 10Web plugin <= 1.15.24 - Cross Site Scripting (XSS) vulnerability

WordPress Form Maker plugin <= 1.15.23 - Cross Site Scripting (XSS) vulnerability

Form Maker <= 1.15.27 - Authenticated (Administrator+) Stored Cross-Site Scripting

Form Maker < 1.13.60 - Authenticated Stored XSS

Form Maker by 10Web <= 1.15.24 - Authenticated (Subscriber+) Stored Self-Based Cross-Site Scripting

WordPress Form Maker by 10Web plugin <= 1.15.20 - Captcha Bypass Vulnerability vulnerability

Form Maker By 10Web < 1.14.12 - Admin+ Stored Cross-Site Scripting

Form Maker by 10Web < 1.15.26 - Admin+ Stored XSS

Form Maker by 10Web < 1.15.33 - Admin+ Stored XSS

Form Maker by 10Web < 1.15.33 - Admin+ Stored XSS via Theme Title

Form Maker by 10Web < 1.15.32 - Admin+ Stored XSS

Form Maker by 10Web < 1.15.30 - Admin+ Stored XSS

Form Maker by 10Web < 1.15.30 - Admin+ Stored XSS

Form Maker by 10Web < 1.15.31 - Admin+ Stored XSS