Read the docs

10web

Records148All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical13CVSS 9.0–10.0
CVSS high40CVSS 7.0–8.9

Exploited now

10web records in CISA KEV

No 10web vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Photo Gallery 49 records HIGH Form Maker 24 records HIGH Slider 9 records MEDIUM Map Builder For Google Maps 4 records HIGH 10web Booster 2 records MEDIUM 10web Social Post Feed 2 records MEDIUM 10webanalytics 2 records LOW Image Optimizer 2 records MEDIUM

Records

2 records in 10web Social Post Feed · all components

TI-2023-02348 CVE-2023-2503 · GHSA-2xrf-r4mx-975v

10WebSocial < 1.2.9 - Reflected XSS

Priority MEDIUM 60

The 10Web Social Post Feed WordPress plugin before 1.2.9 does not sanitise and escape some parameter before outputting it back in a page, leading to a Reflected Cross-Site Scripting which could be used against high privi…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00458 Published 2023-06-05 Fixed in 1.2.9
TI-2024-08912 CVE-2024-9607 · GHSA-h9h2-wjq3-qqrp

10Web Social Post Feed <= 1.2.9 - Reflected Cross-Site Scripting

Priority LOW 29

The 10Web Social Post Feed plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.2.9.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00317 Published 2024-10-25 No fix listed CWE-79
Open these records in search →