Skip to content
OpenAdvisories

Vendor

10web

74 known vulnerabilities.

42 results · Clear filters · Feed

  • Medium 6.4

    WDContactFormBuilder <= 1.0.72 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The WDContactFormBuilder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Contact_Form_Builder' shortcode in versions up to, and including, 1.0.72 due to insufficient input sanitization and output escaping on 'id' user supplied attri…

  • Medium 4.3

    10WebAnalytics <= 1.2.8 - Cross-Site Request Forgery Bypass

    The 10WebAnalytics plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.8. This is due to missing or incorrect nonce validation on the create_csv_file() function. This makes it possible for unauthenticated att…