[ Vendor · 15 CVEs ]
10web
CVEs affecting 10web published in the last 30 days, plus any 10web CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-103896 | 16 Oct 2026 | CVSS 7.5 | 10Web Booster – Website speed optimization, Cache & Page Speed optimizerThe 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to a limited file write via path… | |
| CVE-2026-18557 | 15 Oct 2026 | CVSS 6.1 | 10web Photo Gallery by 10Web – Mobile-Friendly Image GalleryThe Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'title'… | |
| CVE-2026-108587 | 15 Oct 2026 | CVSS 9.8 | 10Web Booster – Website speed optimization, Cache & Page Speed optimizerThe 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to Arbitrary File Upload in all… | |
| CVE-2026-95808 | 14 Oct 2026 | CVSS 7.5 | 10web Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form BuilderThe Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to blind SQL Injection via the 'inputs'… | |
| CVE-2026-42711 | 10 Oct 2026 | CVSS 7.1 | 10Web Slider by 10WebUnauthenticated Cross Site Scripting (XSS) in Slider by 10Web <= 1.2.63 versions. | |
| CVE-2026-42715 | 10 Oct 2026 | CVSS 7.1 | 10Web Photo Gallery by 10WebUnauthenticated Cross Site Scripting (XSS) in Photo Gallery by 10Web <= 1.8.47 versions. | |
| CVE-2026-105885 | 10 Oct 2026 | CVSS 8.8 | 10Web Slider by 10WebDeserialization of Untrusted Data vulnerability in 10Web Slider by 10Web slider-wd allows Object Injection.This issue affects Slider by 10Web: from… | |
| CVE-2026-107742 | 10 Oct 2026 | CVSS 7.2 | 10Web Booster – Website speed optimization, Cache & Page Speed optimizerThe 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… | |
| CVE-2026-103998 | 10 Oct 2026 | CVSS 6.1 | 10web Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form BuilderThe Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via… | |
| CVE-2026-42710 | 7 Oct 2026 | CVSS 7.6 | 10Web Slider by 10WebImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 10Web Slider by 10Web slider-wd allows Blind… | |
| CVE-2026-39787 | 6 Oct 2026 | CVSS 6.5 | 10Web Social Photo FeedUnauthenticated Broken Access Control in 10Web Social Photo Feed <= 1.4.35 versions. | |
| CVE-2026-92974 | 3 Oct 2026 | CVSS 6.1 | 10web Photo Gallery by 10Web – Mobile-Friendly Image GalleryThe Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'thumb_url'… | |
| CVE-2026-96813 | 1 Oct 2026 | CVSS 7.2 | 10web Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form BuilderThe Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Mark… | |
| CVE-2026-102377 | 30 Sep 2026 | CVSS 8.8 | 10Web Photo Gallery by 10WebContributor PHP Object Injection in Photo Gallery by 10Web <= 1.8.46 versions. | |
| CVE-2026-94121 | 30 Sep 2026 | CVSS 8.8 | 10Web Booster – Website speed optimization, Cache & Page Speed optimizerContributor PHP Object Injection in 10Web Booster – Website speed optimization, Cache & Page Speed optimizer <= 2.33.6 versions. |