CVE-2025-15441

The Form Maker by 10Web WordPress plugin, in versions prior to 1.15.38 , contains a vulnerability where it fails to properly prepare SQL queries when the "MySQL Mapping" feature is active. This flaw could allow attackers to perform SQL Injection attacks in certain contexts. To remediate this, use...

WordPress plugin Form Maker by 10Web 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

VulnCheck KEV: CVE-2024-10400

The Tutor LMS plugin for WordPress is vulnerable to SQL Injection via the ‘ratingfilter’ parameter in all versions up to, and including, 2.7.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...