CVE-2025-15441 — Form Maker < 1.15.38 - SQL Injection
The Form Maker by 10Web WordPress plugin before 1.15.38 does not properly prepare SQL queries when the "MySQL Mapping" feature is in use, which could make SQL Injection attacks…
Published: 2026-04-13 · CVSS: 6.8 · CVSS 3.1
The Form Maker by 10Web WordPress plugin before 1.15.38 does not properly prepare SQL queries when the "MySQL Mapping" feature is in use, which could make SQL Injection attacks possible in certain contexts.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7