Vulnerabilidades em 10Web
74 resultadosAnálise Vexday
A 10Web apresenta 18 vulnerabilidades no histórico, com 1 crítica e 3 publicadas nos últimos 90 dias, indicando atividade contínua de descobertas. Nenhuma vulnerabilidade está sob exploração ativa conhecida (KEV=0), reduzindo o risco imediato. A fraqueza predominante é XSS (CWE-79), típica de plataformas web, requerendo atenção em validação e sanitização de entrada.
CVE-2026-11777MEDIUMForm Maker by 10Web <= 1.15.43 - Authenticated (Administrator+) SQL Injection via 'name' ParameterEPSS 0.3%CVE-2024-8633MEDIUMForm Maker <= 1.15.27 - Authenticated (Administrator+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2024-9607MEDIUM10Web Social Post Feed <= 1.2.9 - Reflected Cross-Site ScriptingEPSS 0.3%CVE-2024-5426MEDIUMPhoto Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via Zipped SVGEPSS 0.3%CVE-2024-44043MEDIUMWordPress Photo Gallery by 10Web plugin <= 1.8.27 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-49771HIGHWordPress Photo Gallery by 10Web plugin <= 1.8.41 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-118067MEDIUMForm Maker by 10Web <= 1.15.50 - Unauthenticated Stored Cross-Site Scripting via disabled_fields ParameterEPSS 0.3%CVE-2026-96813HIGHForm Maker by 10Web <= 1.15.47 - Unauthenticated Stored Cross-Site Scripting via Mark on Map Longitude/Latitude FieldsEPSS 0.3%CVE-2023-45272MEDIUMWordPress 10Web Map Builder for Google Maps plugin <= 1.0.73 - Notice Dismissal VulnerabilityEPSS 0.3%CVE-2026-39502CRITICALWordPress Form Maker by 10Web plugin <= 1.15.38 - SQL Injection vulnerabilityEPSS 0.3%CVE-2023-47807MEDIUMWordPress 10WebAnalytics plugin <= 1.2.12 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-102377HIGHWordPress Photo Gallery by 10Web plugin <= 1.8.46 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-105885HIGHWordPress Slider by 10Web plugin <= 1.2.62 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-39787MEDIUMWordPress 10Web Social Photo Feed plugin <= 1.4.35 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-2269MEDIUMPhoto Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.34 Reflected Cross-Site Scripting via 'image_id' ParameterEPSS 0.3%CVE-2026-86311MEDIUMPhoto Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.44 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode AttributesEPSS 0.3%CVE-2026-1036MEDIUMPhoto Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.36 - Missing Authorization to Unauthenticated Arbitrary Comment DeletionEPSS 0.3%CVE-2026-66616HIGHWordPress Form Maker by 10Web plugin <= 1.15.49 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-4388HIGHForm Maker by 10Web <= 1.15.40 - Unauthenticated Stored Cross-Site Scripting via Matrix Field Text BoxEPSS 0.2%CVE-2026-107742HIGH10Web Booster <= 2.34.8 - Unauthenticated Stored Cross-Site Scripting via Comment Author NameEPSS 0.2%