2 matches found
CVE-2026-118067
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wdformelement payload + disabledfields pivot' parameter in all versions up to, and including, 1.15.50 due to insufficient input sanitization and...
5.4CVSS0.00305EPSS
SaveExploits0References9
EUVD-2026-118565
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wdformelement payload + disabledfields pivot' parameter in all versions up to, and including, 1.15.50 due to insufficient input sanitization and...
5.4CVSS6.1AI score0.00305EPSS
SaveExploits0References9
20