CVE-2026-120512 | 10Web Form Maker by 10Web Plugin up to 1.15.50 on WordPress Hidden Input Field wdform__element cross site scripting

A vulnerability classified as problematic has been found in 10Web Form Maker by 10Web Plugin up to 1.15.50 on WordPress. The affected element is an unknown function of the component Hidden Input Field. Performing a manipulation of the argument wdform__element results in cross site scripting.

This vulnerability is reported as CVE-2026-120512. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More