1
Vendor security profile
10web
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs17
Critical0
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS7.1
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
3
5
9
CVE KEV
CVE severity distribution
17toplam CVE
High10 (59%)
Medium7 (41%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
17Unknown
Latest vulnerabilities
7.1
CVE-2026-42715
WordPress Photo Gallery by 10Web plugin <= 1.8.47 - Cross Site Scripting (XSS) vulnerability
1
Patch status unknownEPSS %0
7.1
CVE-2026-42711
WordPress Slider by 10Web plugin <= 1.2.63 - Cross Site Scripting (XSS) vulnerability
1
Patch status unknownEPSS %0
8.8
CVE-2026-105885
WordPress Slider by 10Web plugin <= 1.2.62 - PHP Object Injection vulnerability
1
Patch status unknownEPSS %0
7.2
CVE-2026-107742
10Web Booster <= 2.34.8 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name
1
Patch status unknownEPSS %0
6.1
CVE-2026-103998
Form Maker by 10Web <= 1.15.48 - Reflected Cross-Site Scripting via 'inputs' Parameter Array Key
1
Patch status unknownEPSS %0
7.6
CVE-2026-42710
WordPress Slider by 10Web plugin <= 1.2.63 - SQL Injection vulnerability
1
Patch status unknownEPSS %0
6.5
CVE-2026-39787
WordPress 10Web Social Photo Feed plugin <= 1.4.35 - Broken Access Control vulnerability
1
Patch status unknownEPSS %0
6.1
CVE-2026-92974
Photo Gallery by 10Web <= 1.8.46 - Reflected Cross-Site Scripting via 'thumb_url' Parameter
1
Patch status unknownEPSS %0
7.2
CVE-2026-96813
Form Maker by 10Web <= 1.15.47 - Unauthenticated Stored Cross-Site Scripting via Mark on Map Longitude/Latitude Fields
1
Patch status unknownEPSS %0
8.8
CVE-2026-102377
WordPress Photo Gallery by 10Web plugin <= 1.8.46 - PHP Object Injection vulnerability
1
Patch status unknownEPSS %0