Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 49
Reset filtersForm Maker by 10Web <= 1.15.26 - Reflected Cross-Site Scripting
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.25 - Authenticated (Admin+) Stored Cross-Site Scripting
Form Maker by 10Web <= 1.15.24 - Authenticated (Administrator+) Stored Cross-Site Scripting
Form Maker by 10Web <= 1.15.24 - Authenticated (Subscriber+) Stored Self-Based Cross-Site Scripting
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.23 - Authenticated (Admin+) Stored Cross-Site Scripting
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.22 - Sensitive Information Exposure
Form-Maker (twb_form-maker) <= 1.15.21 - Cross-Site Request Forgery to Limited Code Execution via Execute
Form Maker <= 1.15.20 - Captcha Bypass
Form Maker by 10Web <= 1.15.18 - Reflected Cross-Site Scripting
Form Maker by 10Web <= 1.15.18 - Unauthenticated Stored Cross-Site Scripting
Form Maker by 10Web <= 1.15.19 - Unauthenticated Arbitrary File Upload
Contact Form Maker <= 1.13.23 - Authenticated (Administrator+) SQL Injection
Form Maker <= 1.15.16 - Missing Authorization in check_score
Form Maker <= 1.15.5 - Authenticated (Administrator+) SQL Injection
Form Maker <= 1.14.11 - Stored Cross-Site Scripting
Form Maker <= 1.13.59 - Authenticated Stored Cross-Site Scripting
Form Maker by 10Web < 1.13.40 - Reflected Cross-Site Scripting
Form Maker by 10Web <= 1.13.35 - SQL Injection
Form Maker by 10Web <= 1.13.2 - Authenticated SQL Injection
Form Maker by 10Web <= 1.13.4 - Cross-Site Request Forgery to Local File Inclusion
Contact Form by WD <= 1.13.4 - Cross-Site Request Forgery
Form Maker by 10Web <= 1.12.21 - CSV Injection
Contact Form Maker <= 1.7.30 - Authenticated (Admin+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.