Medium severity5.9NVD Advisory· Published Apr 9, 2024· Updated Jun 17, 2026

CVE-2024-2112

Description

The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.15.22 via the signature functionality. This makes it possible for unauthenticated attackers to extract sensitive data including user signatures.

Affected products

WordPress/Form Makerinferred
Range: <=1.15.22
Package: https://wordpress.org/plugins/form-maker
WordPress/Form Maker by 10Webllm-fuzzy
Range: <=1.15.22

Patches

Vulnerability mechanics

References

plugins.trac.wordpress.org/changesetnvdPatch
www.wordfence.com/threat-intel/vulnerabilities/id/5652f9c3-3cc9-4541-8209-40117b4d25d9nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.384
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000