https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T08:43:56.578070+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-351578 EUVD-2026-351578 2026-10-08T08:43:56.643912+00:00 EUVD-2026-351578 https://cve.radiocsirt.org/vuln/fkie_cve-2026-16977 fkie_cve-2026-16977 2026-10-08T08:43:56.643972+00:00

The Form Maker by 10Web WordPress plugin before 1.15.45 does not properly parameterize a user-controlled value that is substituted into a dynamic SQL query built for a database-backed choice field, allowing subscriber-level users to perform second-order SQL injection.

 https://cve.radiocsirt.org/vuln/ghsa-h2c2-45p9-4958 GHSA-h2c2-45p9-4958 2026-10-08T08:43:56.644011+00:00

The Form Maker by 10Web WordPress plugin before 1.15.45 does not properly parameterize a user-controlled value that is substituted into a dynamic SQL query built for a database-backed choice field, allowing subscriber-level users to perform second-order SQL injection.