10web vulnerabilities

CVEs per yearBy the year they were published

1. 20211
2. 20234
3. 202423
4. 20256
5. 202637

Newest CVEs

• CVE-2026-118081

  WordPress 10Web Social Photo Feed plugin <= 1.5.6 - PHP Object Injection vulnerability

  10Web · 10Web Social Photo Feed

  High8.8
• CVE-2026-103896

  10Web Booster <= 2.34.5 - Unauthenticated Limited File Write / Cache Poisoning via Query-string Parameter Traversal in Page-Cache Path

  10web · 10Web Booster – Website speed optimization, Cache & Page Speed optimizer

  High7.5
• CVE-2026-18557

  Photo Gallery by 10Web <= 1.8.42 - Reflected Cross-Site Scripting via 'title' Parameter

  10web · Photo Gallery by 10Web – Mobile-Friendly Image Gallery

  Medium6.1
• CVE-2026-108587

  10Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' Parameter

  10web · 10Web Booster – Website speed optimization, Cache & Page Speed optimizer

  Critical9.8
• CVE-2026-95808

  Form Maker by 10Web <= 1.15.48 - Unauthenticated SQL Injection via 'inputs' Parameter

  10web · Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder

  High7.5
• CVE-2026-42715

  WordPress Photo Gallery by 10Web plugin <= 1.8.47 - Cross Site Scripting (XSS) vulnerability

  10Web · Photo Gallery by 10Web

  High7.1
• CVE-2026-42711

  WordPress Slider by 10Web plugin <= 1.2.63 - Cross Site Scripting (XSS) vulnerability

  10Web · Slider by 10Web

  High7.1
• CVE-2026-105885

  WordPress Slider by 10Web plugin <= 1.2.62 - PHP Object Injection vulnerability

  10Web · Slider by 10Web

  High8.8
• CVE-2026-107742

  10Web Booster <= 2.34.8 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name

  10web · 10Web Booster – Website speed optimization, Cache & Page Speed optimizer

  High7.2
• CVE-2026-103998

  Form Maker by 10Web <= 1.15.48 - Reflected Cross-Site Scripting via 'inputs' Parameter Array Key

  10web · Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder

  Medium6.1