PatchTheCVEform maker vulnerabilities and fixes
Recent CVEs affecting form maker, with upgrade or downgrade steps. 8 tracked.
Also searched as: formmaker.
form maker has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 8. Most recent: 2025-05-15. Highest priority: CVE-2024-10265 (score 30/100).
- CVE-2024-8633 MEDIUM 5.5 UPGRADE The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable
- CVE-2024-13605 MEDIUM 4.8 UPGRADE The Form Maker by 10Web WordPress plugin before 1.15.33 does not sanitise and escape some of its settings, wh
- CVE-2024-13053 MEDIUM 4.8 UPGRADE The Form Maker by 10Web WordPress plugin before 1.15.33 does not sanitise and escape some of its settings, wh
- CVE-2024-10680 MEDIUM 4.8 UPGRADE The Form Maker by 10Web WordPress plugin before 1.15.32 does not sanitise and escape some of its settings, wh
- CVE-2024-10562 LOW 2.7 UPGRADE The Form Maker by 10Web WordPress plugin before 1.15.31 does not sanitise and escape some of its settings, wh
- CVE-2024-10560 LOW 3.5 UPGRADE The Form Maker by 10Web WordPress plugin before 1.15.30 does not sanitise and escape some of its settings, wh
- CVE-2024-10558 LOW 3.5 UPGRADE The Form Maker by 10Web WordPress plugin before 1.15.30 does not sanitise and escape some of its settings, wh
- CVE-2024-10265 MEDIUM 6.1 UPGRADE The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable
FAQ
How do I fix form maker vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is form maker being exploited right now?
None of the tracked form maker CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which form maker CVE should I patch first?
CVE-2024-10265 currently ranks highest (30/100): The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable .