Skip to content
5.9 Medium

CVE-2024-2112 The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to…

Description

The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.15.22 via the signature functionality. This makes it possible for unauthenticated attackers to extract sensitive data including user signatures.

Affected products and versions

Product Affected versions Fixed in
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder 1.15 earliest → 1.15.22 No fix stated
The 18 CVEs of Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder →
Track this CVE