Skip to content
Threat Feed
Subscribe

Vendor

10Web

5 briefs RSS
high advisory

10Web Social Photo Feed: PHP object injection (CVE-2026-118081)

The 10Web Social Photo Feed plugin versions 1.5.6 and earlier contain a contributor-level PHP object injection vulnerability.

Social Photo Feed
1c
critical advisory

Arbitrary File Upload in 10Web Booster WordPress Plugin (CVE-2026-108587)

An unauthenticated remote code execution vulnerability exists in 10Web Booster versions 2.34.10 and earlier due to insecure file handling and nonce leakage.

10Web Booster web-application wordpress remote-code-execution cve-2026-108587
2t 1c
high advisory

Stored XSS in 10Web Booster WordPress Plugin (CVE-2026-107742)

The 10Web Booster WordPress plugin is vulnerable to unauthenticated Stored Cross-Site Scripting (XSS) via the author parameter in versions up to 2.34.8.

10Web Booster – Website speed optimization, Cache & Page Speed optimizer
1r 1t 1c
high advisory

Stored XSS in Form Maker by 10Web WordPress Plugin

The Form Maker by 10Web WordPress plugin contains a stored cross-site scripting vulnerability in longitude and latitude fields that allows unauthenticated attackers to execute arbitrary scripts in the context of other users.

Form Maker web-application xss wordpress cve-2026-96813
1t 1c
high advisory

SQL Injection Vulnerability in Form Maker by 10Web WordPress Plugin

The Form Maker by 10Web WordPress plugin is vulnerable to SQL Injection via the 'inputs' parameter in versions up to 1.15.42, allowing unauthenticated attackers to extract sensitive information from the database.

Form Maker by 10Web sql-injection wordpress plugin
2r 1t 1c