CVE-2026-15993 | 10Web Form Maker Plugin up to 1.15.44 on WordPress Dynamic-Choice Field Username sql injection

A vulnerability was found in 10Web Form Maker Plugin up to 1.15.44 on WordPress. It has been rated as critical. Affected by this vulnerability is an unknown functionality of the component Dynamic-Choice Field. Performing a manipulation of the argument Username results in sql injection.

This vulnerability is cataloged as CVE-2026-15993. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More