CVE-2026-118067 | 10Web Form Maker Plugin up to 1.15.50 on WordPress Submissions Page wdform__element/disabled_fields cross site scripting (EUVD-2026-118565)

November 7, 2026 Yanac

A vulnerability was found in 10Web Form Maker Plugin up to 1.15.50 on WordPress. It has been rated as problematic. Affected by this vulnerability is an unknown functionality of the component Submissions Page. Performing a manipulation of the argument wdform__element/disabled_fields results in cross site scripting.

This vulnerability is identified as CVE-2026-118067. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More