Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-06-17
Form Maker - Path Traversal (CVE-2019-11590)
The 10Web Form Maker plugin before 1.13.5 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file inclusion via directory traversal, because there can be a discrepancy between the $_POST['action'] value and the $_GET['action'] value, and the latter is unsanitized.
PLUGIN
Form Maker
CVE-2019-11590
Risk Score
Threat Entry
Updated 2026-06-17
Form Maker - Security Vulnerability (CVE-2018-10504)
The WebDorado "Form Maker by WD" plugin before 1.12.24 for WordPress allows CSV injection.
PLUGIN
Form Maker
CVE-2018-10504
Risk Score