Read the docs

10web

Records148All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical13CVSS 9.0–10.0
CVSS high40CVSS 7.0–8.9

Exploited now

10web records in CISA KEV

No 10web vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Photo Gallery 49 records HIGH Form Maker 24 records HIGH Slider 9 records MEDIUM Map Builder For Google Maps 4 records HIGH 10web Booster 2 records MEDIUM 10web Social Post Feed 2 records MEDIUM 10webanalytics 2 records LOW Image Optimizer 2 records MEDIUM

Records

2 records in Image Optimizer · all components

TI-2023-01995 CVE-2023-2122 · GHSA-fx9f-2mhx-34vx

Image Optimizer by 10web < 1.0.27 - Reflected Cross-Site Scripting

Priority MEDIUM 60

The Image Optimizer by 10web WordPress plugin before 1.0.27 does not sanitise and escape the iowd_tabs_active parameter before rendering it in the plugin admin panel, leading to a reflected Cross-Site Scripting vulnerabi…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0085 Published 2023-08-16 Fixed in 1.0.27
TI-2023-01990 CVE-2023-2117 · GHSA-3h2r-h2x2-mg4h

Image Optimizer by 10web < 1.0.27 - Admin+ Path Traversal

Priority MEDIUM 47

The Image Optimizer by 10web WordPress plugin before 1.0.27 does not sanitize the dir parameter when handling the get_subdirs ajax action, allowing a high privileged users such as admins to inspect names of files and dir…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00665 Published 2023-05-30 Fixed in 1.0.27
Open these records in search →