Description
Unauthenticated SQL Injection in Form Maker by 10Web <= 1.15.38 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| 10Web | Form Maker by 10Web | ≤ 1.15.38 | — |
Critical · 9.3
CVE-2026-39502
EUVD-2026-36947GHSA-hqwp-wgxm-88pc
WordPress Form Maker by 10Web plugin <= 1.15.38 - SQL Injection vulnerability
Published Jun 15, 2026 · Updated Jun 15, 2026 · Assigned by Patchstack