The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.15.22 via the signature functionality. This makes it possible for unauthenticated attackers to extract sensitive data including user signatures.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Form Maker Plugin | — | Update form-maker plugin to version 1.15.23, or a newer patched version | May 15, 2025 | Mar 22, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub