Form Maker
27 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Form Maker, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.
Form Maker CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 1 |
| 2024-12 | 0 |
| 2025-01 | 1 |
| 2025-02 | 1 |
| 2025-03 | 2 |
| 2025-04 | 1 |
| 2025-05 | 1 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 1 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 27 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical3
- High7
- Medium14
- Low3
Latest CVEs
The 15 most recently published vulnerabilities affecting Form Maker.
- CVE-2018-25346WordPress Form Maker Plugin 1.12.24 SQL Injection via admin-ajax.php7.1
- CVE-2024-13053Form Maker by 10Web < 1.15.33 - Admin+ Stored XSS via Theme Title4.8
- CVE-2024-10680Form Maker by 10Web < 1.15.32 - Admin+ Stored XSS4.8
- CVE-2024-10560Form Maker by 10Web < 1.15.30 - Admin+ Stored XSS3.5
- CVE-2024-10558Form Maker by 10Web < 1.15.30 - Admin+ Stored XSS3.5
- CVE-2024-13605Form Maker by 10Web < 1.15.33 - Admin+ Stored XSS4.8
- CVE-2024-10562Form Maker by 10Web < 1.15.31 - Admin+ Stored XSS2.7
- CVE-2024-10265Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.30 - Reflected Cross-Site Scripting via add_query_arg Parameter6.1
- CVE-2024-8633Form Maker <= 1.15.27 - Authenticated (Administrator+) Stored Cross-Site Scripting5.5
- CVE-2024-43220WordPress Form Maker by 10Web plugin <= 1.15.26 - Reflected Cross Site Scripting (XSS) vulnerability7.1
- CVE-2024-6130Form Maker by 10Web < 1.15.26 - Admin+ Stored XSS4.8
- CVE-2023-48290WordPress Form Maker by 10Web plugin <= 1.15.20 - Captcha Bypass Vulnerability vulnerability5.3
- CVE-2024-34437WordPress Form Maker by 10Web plugin <= 1.15.24 - Cross Site Scripting (XSS) vulnerability5.9
- CVE-2024-2258Form Maker by 10Web <= 1.15.24 - Authenticated (Subscriber+) Stored Self-Based Cross-Site Scripting4.4
- CVE-2024-32534WordPress Form Maker plugin <= 1.15.23 - Cross Site Scripting (XSS) vulnerability5.9
Product grouping is registry-driven, with AI assist and human review. How it works