Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder, CVE-2025-15441

CVE, Research URL: CVE-2025-15441
Home page URL: Security reports for Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
Application: Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
Published on: Apr 13, 2026
Research Description: The Form Maker by 10Web WordPress plugin before 1.15.38 does not properly prepare SQL queries when the "MySQL Mapping" feature is in use, which could make SQL Injection attacks possible in certain contexts.
Affected versions: max 1.15.38.
Status: vulnerable

Form Maker by 10Web &#8211; Mobile-Friendly Drag &amp; Drop Contact Form Builder, CVE-2025-15441