SQL Injection

Every one of the 28 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Photo Gallery by 10Web < 1.6.0 - SQL InjectionCVE-2022-016910web · 75% likely

   CWE-89

2. Photo Gallery WordPress v1.6.3 - SQL InjectionCVE-2022-128110web · 43% likely

   CWE-89

3. 10Web Photo Gallery < 1.5.55 - SQL InjectionCVE-2021-2413910web · 5.5% likely

   CWE-89

4. WordPress 10Web Map Builder < 1.0.73 - Unauthenticated SQL InjectionCVE-2023-003710web · CVSS 9.8 · 3.9% likely

   CWE-89

5. SQL injection in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via the admin/controllers/Albumsgalleries.php album_id parameter.CVE-2019-1611910web · 25% likely

   CWE-89

6. In the Form Maker plugin before 1.13.3 for WordPress, it's possible to achieve SQL injection in the function get_labels_parameters in the file form-maker/admin/models/Submissions_…CVE-2019-1086610web · 6.2% likely

   CWE-89

7. A SQL injection vulnerability exists in the 10Web Photo Gallery plugin before 1.5.31 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to…CVE-2019-1431310web · 4.5% likely

   CWE-89

8. Slider by 10Web < 1.2.36 - Multiple Authenticated SQL InjectionCVE-2021-2413210web · 2.6% likely

   CWE-89

9. SQL injection vulnerability in the Photo Gallery plugin 1.2.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the order_by parameter in a GalleryBox ac…CVE-2015-105510web · 2.1% likely

   CWE-89

10. SQL injection vulnerability in the Photo Gallery plugin before 1.2.11 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the asc_or_desc paramet…CVE-2015-139310web · 1.7% likely

    CWE-89

11. The Web-Dorado "Photo Gallery by WD - Responsive Photo Gallery" plugin before 1.3.51 for WordPress has a SQL injection vulnerability related to bwg_edit_tag() in photo-gallery.php…CVE-2017-1297710web · 1.6% likely

    CWE-89

12. Form Maker by 10Web < 1.15.6 - Admin+ SQLICVE-2022-330010web · CVSS 7.2 · 1.4% likely

    CWE-89

13. WD WidgetTwitter <= 1.0.9 - Authenticated (Contributor+) SQL Injection via ShortcodeCVE-2023-570910web · CVSS 8.8 · 1.1% likely

    CWE-89

14. Slider by 10Web – Responsive Image Slider <= 1.2.57 - Authenticated (Contributor+) SQL Injection via id ParameterCVE-2024-715010web · CVSS 8.8 · 0.6% likely

    CWE-89

15. Photo Gallery by 10Web <= 1.8.44 - Authenticated (Author+) SQL Injection via 'album_id' Shortcode AttributeCVE-2026-8565210web · CVSS 6.5 · 0.6% likely

    CWE-89

16. WordPress 10Web Map Builder for Google Maps plugin <= 1.0.74 - SQL Injection vulnerabilityCVE-2024-3111610Web · CVSS 7.6 · 0.5% likely

    CWE-89

17. Photo Gallery by 10Web <= 1.8.40 - Authenticated (Contributor+) SQL Injection via 'order_by' Shortcode AttributeCVE-2026-704810web · CVSS 6.5 · 0.5% likely

    CWE-89

18. Form Maker by 10Web <= 1.15.44 - Authenticated (Subscriber+) SQL Injection via '{username}' Placeholder in Dynamic-Choice Field WHERE ClauseCVE-2026-1599310web · CVSS 5.3 · 0.5% likely

    CWE-89

19. Photo Gallery by 10Web <= 1.8.41 - Authenticated (Contributor+) SQL Injection via 'compact_album_order_by' Shortcode ParameterCVE-2026-982910web · CVSS 6.5 · 0.5% likely

    CWE-89

20. Form Maker by 10Web <= 1.15.48 - Unauthenticated SQL Injection via 'inputs' ParameterCVE-2026-9580810web · CVSS 7.5 · 0.4% likely

    CWE-89

21. Form Maker by 10Web <= 1.15.40 - Authenticated (Administrator+) SQL Injection via 'ip_search' ParameterCVE-2026-333010web · CVSS 4.9 · 0.4% likely

    CWE-89

22. Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.42 - Unauthenticated SQL Injection via 'inputs'CVE-2026-335910web · CVSS 7.5 · 0.4% likely

    CWE-89

23. Form Maker by 10Web <= 1.15.43 - Authenticated (Administrator+) SQL Injection via 'name' ParameterCVE-2026-1177710web · CVSS 4.9 · 0.3% likely

    CWE-89

24. Form Maker by 10Web <= 1.15.43 - Authenticated (Adminsitrator+) SQL Injection via 'groupids' ParameterCVE-2026-1177610web · CVSS 4.9 · 0.3% likely

    CWE-89

25. WordPress Photo Gallery by 10Web plugin <= 1.8.41 - SQL Injection vulnerabilityCVE-2026-4977110Web · CVSS 7.6 · 0.3% likely

    CWE-89

26. WordPress Form Maker by 10Web plugin <= 1.15.38 - SQL Injection vulnerabilityCVE-2026-3950210Web · CVSS 9.3 · 0.3% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.