VULNERABILITY INTELLIGENCE
CVE-2025-15441
CVSS score6.8 MEDIUM
EPSS probability0.27%
CISA KEVNot currently listed
Published2026-04-13
Last modified2026-10-07
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Description
The Form Maker by 10Web WordPress plugin before 1.15.38 does not properly prepare SQL queries when the "MySQL Mapping" feature is in use, which could make SQL Injection attacks possible in certain contexts.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-89