← Back

10web

103 CVEs • 15 products

Products (15)

Click to collapse
Toggle
Photo Gallery
photo_gallery
49 CVEs
Form Maker
form_maker
24 CVEs
Slider
slider
9 CVEs
Map Builder For Google Maps
map_builder_for_google_maps
4 CVEs
Image Optimizer
image_optimizer
2 CVEs
Seo
seo
2 CVEs
10web Social Post Feed
10web_social_post_feed
2 CVEs
10webanalytics
2 CVEs
10web Booster
10web_booster
2 CVEs
Wps Telegram Chat
wps_telegram_chat
2 CVEs
10websocial
1 CVE
Spidercalendar
spidercalendar
1 CVE
Sliderby10web
sliderby10web
1 CVE
Ai Assistant
ai_assistant
1 CVE
Spidercontacts
spidercontacts
1 CVE

CVEs (103)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-12977
110web
1Photo Gallery
May 13, 2026
Aug 21, 2017
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
The Web-Dorado "Photo Gallery by WD - Responsive Photo Gallery" plugin before 1.3.51 for WordPress has a SQL injection vulnerability related to bwg_edit_tag() in photo-gallery.php and edit_tag() in admin/controllers/BWGC...Show more
The Web-Dorado "Photo Gallery by WD - Responsive Photo Gallery" plugin before 1.3.51 for WordPress has a SQL injection vulnerability related to bwg_edit_tag() in photo-gallery.php and edit_tag() in admin/controllers/BWGControllerTags_bwg.php. It is exploitable by administrators via the tag_id parameter.Show less
CVE-2015-1393
110web
1Photo Gallery
May 6, 2026
Feb 2, 2015
N/A· v4
N/A· v3
6.5 MEDIUM· v2
SQL injection vulnerability in the Photo Gallery plugin before 1.2.11 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the asc_or_desc parameter in a create gallery request in the gal...Show more
SQL injection vulnerability in the Photo Gallery plugin before 1.2.11 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the asc_or_desc parameter in a create gallery request in the galleries_bwg page to wp-admin/admin.php.Show less
CVE-2015-1055
110web
1Photo Gallery
May 6, 2026
Jan 16, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the Photo Gallery plugin 1.2.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the order_by parameter in a GalleryBox action to wp-admin/admin-ajax.php.