Input validation vulnerability in Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder 1.15.31

The Form Maker plugin for WordPress, created by 10Web, allows users to easily build contact forms for their websites. However, it has been discovered that this plugin is vulnerable to a type of cyber attack called Stored Cross-Site Scripting. This means that attackers with special permissions can inject harmful code into the form settings, causing it to run whenever someone visits the form. This only affects certain types of WordPress installations.

Detected in:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.