CVE-2026-119483highCWE-79

CVE-2026-119483: high-severity vulnerability in 10Web Form Maker by 10Web

WordPress Form Maker by 10Web plugin <= 1.15.50 - Cross Site Scripting (XSS) vulnerability

Published

Follow this CVE+ Monitor Form Maker by 10Web

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

18Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.1
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Form Maker by 10Web form-maker allows Stored XSS.This issue affects Form Maker by 10Web: from n/a through 1.15.50.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Affected products
10Web · Form Maker by 10Web
Related CVEs — 10Web Form Maker by 10Web

In the same product, most dangerous first.

CVE-2026-39502CRITICALWordPress Form Maker by 10Web plugin <= 1.15.38 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-66616HIGHWordPress Form Maker by 10Web plugin <= 1.15.49 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-48341MEDIUMWordPress Form Maker by 10Web plugin <= 1.15.33 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%