10web Vulnerability Advisory Catalog

Total 103 security vulnerabilities recorded for 10web software and firmware.

← Back to All Vendors
CVE-2025-13377 CRITICAL
Component: 10web_booster

The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to arbitrary folder deletion due to in...

📅 2025-12-06
CVSS 9.6 Dossier →
CVE-2024-8670 MEDIUM
Component: photo_gallery

The Photo Gallery by 10Web WordPress plugin before 1.8.29 does not sanitise and escape some of its settings, which could allow high privilege users s...

📅 2025-05-15
CVSS 4.8 Dossier →
Component: form_maker

The Form Maker by 10Web WordPress plugin before 1.15.33 does not sanitise and escape some of its settings, which could allow high privilege users suc...

📅 2025-05-15
CVSS 4.8 Dossier →
Component: form_maker

The Form Maker by 10Web WordPress plugin before 1.15.32 does not sanitise and escape some of its settings, which could allow high privilege users suc...

📅 2025-04-16
CVSS 4.8 Dossier →
CVE-2025-0613 MEDIUM
Component: photo_gallery

The Photo Gallery by 10Web WordPress plugin before 1.8.34 does not sanitised and escaped comment added on images by unauthenticated users, leading to...

📅 2025-03-31
CVSS 6.1 Dossier →
Component: slider

The Slider by 10Web WordPress plugin before 1.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as ...

📅 2025-03-25
CVSS 6.1 Dossier →
Component: slider

The Slider by 10Web WordPress plugin before 1.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as ...

📅 2025-03-25
CVSS 6.1 Dossier →
Component: form_maker

The Form Maker by 10Web WordPress plugin before 1.15.30 does not sanitise and escape some of its settings, which could allow high privilege users suc...

📅 2025-03-25
CVSS 3.5 Dossier →
Component: photo_gallery

The Photo Gallery by 10Web WordPress plugin before 1.8.33 does not sanitise and escape some of its settings, which could allow high privilege users s...

📅 2025-03-24
CVSS 3.5 Dossier →
Component: form_maker

The Form Maker by 10Web WordPress plugin before 1.15.30 does not sanitise and escape some of its settings, which could allow high privilege users suc...

📅 2025-03-24
CVSS 3.5 Dossier →
Component: form_maker

The Form Maker by 10Web WordPress plugin before 1.15.33 does not sanitise and escape some of its settings, which could allow high privilege users suc...

📅 2025-02-24
CVSS 4.8 Dossier →
Component: form_maker

The Form Maker by 10Web WordPress plugin before 1.15.31 does not sanitise and escape some of its settings, which could allow high privilege users suc...

📅 2025-01-07
CVSS 2.7 Dossier →
Component: 10webanalytics

Missing Authorization vulnerability in 10Web 10WebAnalytics wd-google-analytics allows Exploiting Incorrectly Configured Access Control Security Level...

📅 2025-01-02
CVSS 4.3 Dossier →
Component: map_builder_for_google_maps

Missing Authorization vulnerability in 10Web 10Web Map Builder for Google Maps allows Exploiting Incorrectly Configured Access Control Security Levels...

📅 2025-01-02
CVSS 5.4 Dossier →
Component: photo_gallery

Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web allows Exploiting Incorrectly Configured Access Control Security Leve...

📅 2024-12-13
CVSS 4.3 Dossier →
Component: photo_gallery

The Photo Gallery by 10Web WordPress plugin before 1.8.31 does not sanitise and escape some of its settings, which could allow high privilege users s...

📅 2024-11-29
CVSS 4.8 Dossier →
Component: form_maker

The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to...

📅 2024-11-10
CVSS 6.1 Dossier →
CVE-2024-9878 MEDIUM
Component: photo_gallery

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all...

📅 2024-11-05
CVSS 4.4 Dossier →
CVE-2024-9630 MEDIUM
Component: wps_telegram_chat

The WPS Telegram Chat plugin for WordPress is vulnerable to authorization bypass due to a missing capability check when accessing messages in versions...

📅 2024-10-25
CVSS 5.4 Dossier →
CVE-2024-9628 MEDIUM
Component: wps_telegram_chat

The WPS Telegram Chat plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on th...

📅 2024-10-25
CVSS 6.3 Dossier →
CVE-2024-9607 MEDIUM
Component: 10web_social_post_feed

The 10Web Social Post Feed plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate es...

📅 2024-10-25
CVSS 6.1 Dossier →
CVE-2024-5968 MEDIUM
Component: photo_gallery

The Photo Gallery by 10Web WordPress plugin before 1.8.28 does not properly sanitise and escape some of its Gallery settings, which could allow high ...

📅 2024-10-09
CVSS 4.8 Dossier →
Component: photo_gallery

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Photo Gallery by 10Web photo-gallery allow...

📅 2024-10-06
CVSS 5.9 Dossier →
CVE-2024-8283 MEDIUM
Component: slider

The Slider by 10Web WordPress plugin before 1.2.59 does not sanitise and escape some of its settings, which could allow high privilege users such as ...

📅 2024-09-30
CVSS 4.8 Dossier →
Page 1 of 5 (103 Total Records)