Vulnerabilities in 10Web

49 results
Vexday analysis

A 10Web apresenta 18 vulnerabilidades no histórico, com 1 crítica e 3 publicadas nos últimos 90 dias, indicando atividade contínua de descobertas. Nenhuma vulnerabilidade está sob exploração ativa conhecida (KEV=0), reduzindo o risco imediato. A fraqueza predominante é XSS (CWE-79), típica de plataformas web, requerendo atenção em validação e sanitização de entrada.

CVE-2023-47807MEDIUMWordPress 10WebAnalytics plugin <= 1.2.12 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-2269MEDIUMPhoto Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.34 Reflected Cross-Site Scripting via 'image_id' ParameterEPSS 0.3%CVE-2026-4388HIGHForm Maker by 10Web <= 1.15.40 - Unauthenticated Stored Cross-Site Scripting via Matrix Field Text BoxEPSS 0.2%CVE-2024-0667MEDIUMForm-Maker (twb_form-maker) <= 1.15.21 - Cross-Site Request Forgery to Limited Code Execution via ExecuteEPSS 0.2%CVE-2026-1036MEDIUMPhoto Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.36 - Missing Authorization to Unauthenticated Arbitrary Comment DeletionEPSS 0.2%CVE-2025-48341MEDIUMWordPress Form Maker by 10Web plugin <= 1.15.33 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2018-25346HIGHWordPress Form Maker Plugin 1.12.24 SQL Injection via admin-ajax.phpEPSS 0.2%CVE-2026-27360MEDIUMWordPress Photo Gallery by 10Web plugin <= 1.8.38 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-32330MEDIUMWordPress Photo Gallery by 10Web plugin <= 1.8.37 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%