Skip to content
OpenAdvisories

Vendor

10web

74 known vulnerabilities.

Products

Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder 20 Photo Gallery by 10Web – Mobile-Friendly Image Gallery 15 Photo Gallery by 10Web 6 PhotoGallery 5 Slider by 10Web 5 10Web Booster – Website speed optimization, Cache & Page Speed optimizer 5 Form Maker by 10Web 4 10Web Map Builder for Google Maps 3 10WebAnalytics 2 10Web Social Photo Feed 2 WDContactFormBuilder 1 Slider by 10Web – Responsive Image Slider 1 WD WidgetTwitter 1 10Web AI Assistant – AI content writing assistant 1 Form Maker 1 10Web Social Post Feed 1 SEO by 10Web 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-108587

    10Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' Parameter

    The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.34.10 via the compressCustom function. This is due to missing file type validation…

    10web 10Web Booster – Website speed optimization, Cache & Page Speed optimizer Web / CMS
  • Critical 9.3
    CVE-2026-39502

    WordPress Form Maker by 10Web plugin <= 1.15.38 - SQL Injection vulnerability

    Unauthenticated SQL Injection in Form Maker by 10Web <= 1.15.38 versions.

    10web Form Maker by 10Web
  • Critical 9.6
    CVE-2025-13377

    10Web Booster <= 2.32.7 - Authenticated (Subscriber+) Arbitrary Folder Deletion via two_clear_page_cache

    The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to arbitrary folder deletion due to insufficient file path validation in the get_cache_dir_for_page_from_url() function in all versions up to, and …

    10web 10Web Booster – Website speed optimization, Cache & Page Speed optimizer Web / CMS
  • Critical 9.1
    CVE-2024-0221

    Photo Gallery by 10Web - Mobile-Friendly Image Gallery <= 1.8.19 - Directory Traversal to Arbitrary File Rename

    The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.8.19 via the rename_item function. This makes it possible for authenticated attackers to rename arbitr…

    10web Photo Gallery by 10Web – Mobile-Friendly Image Gallery Web / CMS