Back to Database
Status published
Medium
CVE-2023-48290
WordPress Form Maker by 10Web plugin <= 1.15.20 - Captcha Bypass Vulnerability vulnerability
Vulnerability Description
Improper Restriction of Excessive Authentication Attempts vulnerability in 10Web Form Builder Team Form Maker by 10Web allows Functionality Bypass.This issue affects Form Maker by 10Web: from n/a through 1.15.20.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-48290
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- qilin_99 (Patchstack Alliance)
More from 10Web Form Builder Team
View All →CVE-2024-43220
WordPress Form Maker by 10Web plugin <= 1.15.26 - Reflected Cross Site Scripting (XSS) vulnerability
High
7.1
CVE-2024-34437
WordPress Form Maker by 10Web plugin <= 1.15.24 - Cross Site Scripting (XSS) vulnerability
Medium
5.9
CVE-2024-32534
WordPress Form Maker plugin <= 1.15.23 - Cross Site Scripting (XSS) vulnerability
Medium
5.9
CVE-2023-45071
WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)
High
7.1
CVE-2023-45070
WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)
High
7.1
Affected Vendor
10Web Form Builder Team
View all reports →Affected Software
Form Maker by 10Web
Vulnerable Versions:
Unknown
Timeline
Official Publish:
June 4th, 2024
Last Modified:
April 28th, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N