10web vulnerabilities

Recent CVEs affecting 10web products. 25 tracked.

10web has 25 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 25. Most recent: 2025-12-06. Highest priority: CVE-2025-13377 (score 44/100).

• CVE-2025-13377 CRITICAL 9.6 UPGRADE The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerabl
• CVE-2025-0613 MEDIUM 6.1 UPGRADE The Photo Gallery by 10Web WordPress plugin before 1.8.34 does not sanitised and escaped comment added on ima
• CVE-2024-9878 MEDIUM 4.4 UPGRADE The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Stored Cross-
• CVE-2024-9630 MEDIUM 5.4 UPGRADE The WPS Telegram Chat plugin for WordPress is vulnerable to authorization bypass due to a missing capability c
• CVE-2024-9628 MEDIUM 6.3 UPGRADE The WPS Telegram Chat plugin for WordPress is vulnerable to unauthorized modification of data and loss of data
• CVE-2024-9607 MEDIUM 6.1 UPGRADE The 10Web Social Post Feed plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use
• CVE-2024-8670 MEDIUM 4.8 UPGRADE The Photo Gallery by 10Web WordPress plugin before 1.8.29 does not sanitise and escape some of its settings,
• CVE-2024-8633 MEDIUM 5.5 UPGRADE The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable
• CVE-2024-8283 MEDIUM 4.8 UPGRADE The Slider by 10Web WordPress plugin before 1.2.59 does not sanitise and escape some of its settings, which c
• CVE-2024-5968 MEDIUM 4.8 UPGRADE The Photo Gallery by 10Web WordPress plugin before 1.8.28 does not properly sanitise and escape some of its G
• CVE-2024-44043 MEDIUM 5.9 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Ph
• CVE-2024-13605 MEDIUM 4.8 UPGRADE The Form Maker by 10Web WordPress plugin before 1.15.33 does not sanitise and escape some of its settings, wh
• CVE-2024-13124 LOW 3.5 UPGRADE The Photo Gallery by 10Web WordPress plugin before 1.8.33 does not sanitise and escape some of its settings,
• CVE-2024-13053 MEDIUM 4.8 UPGRADE The Form Maker by 10Web WordPress plugin before 1.15.33 does not sanitise and escape some of its settings, wh
• CVE-2024-10704 MEDIUM 4.8 UPGRADE The Photo Gallery by 10Web WordPress plugin before 1.8.31 does not sanitise and escape some of its settings,
• CVE-2024-10680 MEDIUM 4.8 UPGRADE The Form Maker by 10Web WordPress plugin before 1.15.32 does not sanitise and escape some of its settings, wh
• CVE-2024-10566 MEDIUM 6.1 UPGRADE The Slider by 10Web WordPress plugin before 1.2.62 does not sanitise and escape some of its settings, which c
• CVE-2024-10565 MEDIUM 6.1 UPGRADE The Slider by 10Web WordPress plugin before 1.2.62 does not sanitise and escape some of its settings, which c
• CVE-2024-10562 LOW 2.7 UPGRADE The Form Maker by 10Web WordPress plugin before 1.15.31 does not sanitise and escape some of its settings, wh
• CVE-2024-10560 LOW 3.5 UPGRADE The Form Maker by 10Web WordPress plugin before 1.15.30 does not sanitise and escape some of its settings, wh
• CVE-2024-10558 LOW 3.5 UPGRADE The Form Maker by 10Web WordPress plugin before 1.15.30 does not sanitise and escape some of its settings, wh
• CVE-2024-10265 MEDIUM 6.1 UPGRADE The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable
• CVE-2023-47807 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in 10Web 10WebAnalytics wd-google-analytics allows Exploiting Incorrectly
• CVE-2023-45272 MEDIUM 5.4 UPGRADE Missing Authorization vulnerability in 10Web 10Web Map Builder for Google Maps allows Exploiting Incorrectly C
• CVE-2023-33995 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web allows Exploiting Incorrectly

FAQ

How do I fix 10web vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is 10web being exploited right now?

None of the tracked 10web CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which 10web CVE should I patch first?

CVE-2025-13377 currently ranks highest (44/100): The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerabl.

Products

• 10web booster
• 10web social post feed
• 10webanalytics
• form maker
• map builder for google maps
• photo gallery
• slider
• wps telegram chat

RSS feed for 10web · ← Back to latest CVEs