Read the docs

10web

Records148All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical13CVSS 9.0–10.0
CVSS high40CVSS 7.0–8.9

Exploited now

10web records in CISA KEV

No 10web vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Photo Gallery 49 records HIGH Form Maker 24 records HIGH Slider 9 records MEDIUM Map Builder For Google Maps 4 records HIGH 10web Booster 2 records MEDIUM 10web Social Post Feed 2 records MEDIUM 10webanalytics 2 records LOW Image Optimizer 2 records MEDIUM

Records

4 records in Map Builder For Google Maps · all components

TI-2023-00035 CVE-2023-0037 · GHSA-6gc2-7235-x8mp

10WebMapBuilder < 1.0.73 - Unauthenticated SQLi

Priority HIGH 82

The 10Web Map Builder for Google Maps WordPress plugin before 1.0.73 does not properly sanitise and escape some parameters before using them in an SQL statement via an AJAX action available to unauthenticated users, lead…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03911 Published 2023-03-13 Fixed in 1.0.73
TI-2022-04354 CVE-2022-4758 · GHSA-mmm6-292h-j64g

10WebMapBuilder < 1.0.72 - Contributor+ Stored XSS via Shortcode

Priority MEDIUM 58

The 10WebMapBuilder WordPress plugin before 1.0.72 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perfo…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00476 Published 2023-01-23 Fixed in 1.0.72
TI-2024-20505 CVE-2024-31116 · GHSA-5mvp-x2wm-jfrh

WordPress 10Web Map Builder for Google Maps plugin <= 1.0.74 - SQL Injection vulnerability

Priority LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 10Web 10Web Map Builder for Google Maps.This issue affects 10Web Map Builder for Google Maps: from n/a through 1.0.74.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00541 Published 2024-03-31 No fix listed CWE-89
TI-2023-24262 CVE-2023-45272 · GHSA-qpgp-454m-6h35

WordPress 10Web Map Builder for Google Maps plugin <= 1.0.73 - Notice Dismissal Vulnerability

Priority LOW 24

Missing Authorization vulnerability in 10Web 10Web Map Builder for Google Maps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 10Web Map Builder for Google Maps: from n/a throug…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00301 Published 2025-01-02 No fix listed CWE-862
Open these records in search →