---
title: "10Web slider vulnerabilities and CVEs"
url: https://radicalnotion.ai/vendor/10web/slider
type: product
description: "10Web slider has 12 published CVEs, 0 in CISA KEV and 10 with public exploits."
updated: 2026-06-15
source: RadicalNotion.AI
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
---

# 10Web slider vulnerabilities

Vendor: [10Web](https://radicalnotion.ai/vendor/10web)

- **Published CVEs:** 12
- **In CISA KEV:** 0
- **With a public exploit:** 10
- **With a patch:** 10
- **Average CVSS:** 6.7
- **First CVE:** 2021-03-18
- **Latest CVE:** 2026-06-15

## Severity breakdown

| Severity | CVEs |
| --- | --- |
| Critical | 0 |
| High | 5 |
| Medium | 7 |
| Low | 0 |
| Unscored | 0 |

## Most common weakness types

| CWE | Name | CVEs |
| --- | --- | --- |
| [CWE-79](https://radicalnotion.ai/cwe/cwe-79) | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 6 |
| [CWE-89](https://radicalnotion.ai/cwe/cwe-89) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 3 |
| [CWE-352](https://radicalnotion.ai/cwe/cwe-352) | Cross-Site Request Forgery (CSRF) | 1 |
| [CWE-434](https://radicalnotion.ai/cwe/cwe-434) | Unrestricted Upload of File with Dangerous Type | 1 |

## CVEs by year

| Year | CVEs published |
| --- | --- |
| 2021 | 1 |
| 2022 | 1 |
| 2023 | 0 |
| 2024 | 5 |
| 2025 | 2 |
| 2026 | 3 |

## Affected versions

| Version | Kind | CVEs |
| --- | --- | --- |
| \< 1.2.62 | range | 2 |
| \< 1.2.36 | range | 1 |
| \< 1.2.53 | range | 1 |
| \< 1.2.55 | range | 1 |
| \< 1.2.56 | range | 1 |
| \< 1.2.57 | range | 1 |
| \< 1.2.58 | range | 1 |
| \< 1.2.59 | range | 1 |
| \<= 1.2.57 | range | 1 |
| 2.1 | range | 1 |
| 3.4 | range | 1 |
| 6.1 | range | 1 |
| 1.2.62 | patched | 2 |
| 1.2.36 | patched | 1 |
| 1.2.53 | patched | 1 |
| 1.2.55 | patched | 1 |
| 1.2.56 | patched | 1 |
| 1.2.57 | patched | 1 |
| 1.2.58 | patched | 1 |
| 1.2.59 | patched | 1 |

## CVEs

| CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch |
| --- | --- | --- | --- | --- | --- | --- |
| CVE-2016-20074 | WordPress Lazy Content Slider Plugin 3.4 CSRF | medium | 5.3 | No | Yes | No |
| CVE-2019-25745 | WordPress Plugin Google Review Slider 6.1 SQL Injection via tid | high | 8.8 | No | Yes | Yes |
| CVE-2020-37227 | WordPress Plugin HS Brand Logo Slider 2.1 Unrestricted File Upload | high | 8.7 | No | Yes | No |
| CVE-2024-10566 | Slider by 10Web \< 1.2.62 - Contributor+ Stored XSS | medium | 6.1 | No | Yes | Yes |
| CVE-2024-10565 | Slider by 10Web \< 1.2.62 - Admin+ Stored XSS via Widget | medium | 6.1 | No | Yes | Yes |
| CVE-2024-8283 | Slider by 10Web \< 1.2.59 - Admin+ Stored XSS | medium | 4.8 | No | Yes | Yes |
| CVE-2024-7150 | Slider by 10Web – Responsive Image Slider \<= 1.2.57 - Authenticated (Contributor+) SQL Injection via id Parameter | high | 8.8 | No | No | Yes |
| CVE-2024-6408 | Slider by 10Web \< 1.2.57 - Editor+ Stored XSS | medium | 5.4 | No | Yes | Yes |
| CVE-2024-6026 | Slider by 10Web \< 1.2.56 - Editor+ Stored XSS | medium | 6.1 | No | Yes | Yes |
| CVE-2024-32578 | WordPress Sliderby10Web plugin \<= 1.2.54 - Cross Site Scripting (XSS) vulnerability | high | 7.1 | No | No | Yes |
| CVE-2022-4197 | Sliderby10Web \< 1.2.53 - Admin+ Stored XSS | medium | 4.8 | No | Yes | Yes |
| CVE-2021-24132 | Slider by 10Web \< 1.2.36 - Multiple Authenticated SQL Injection | high | 8.8 | No | Yes | Yes |

## Frequently asked questions

### How many CVEs does 10Web slider have?

10Web slider has 12 published CVE records since 2021.

### How many 10Web slider CVEs are in CISA KEV?

None of 10Web slider's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

### Are there public exploits for 10Web slider vulnerabilities?

Yes — 10 of 10Web slider's CVEs have a known public exploit.

### Which versions of 10Web slider are affected?

20 distinct 10Web slider versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

### What are the most common weakness types in 10Web slider CVEs?

10Web slider's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-434 (Unrestricted Upload of File with Dangerous Type).

### What is the average severity of 10Web slider CVEs?

The average CVSS base score across 10Web slider's scored CVEs is 6.7.

## Other products from this vendor

- [photo gallery](https://radicalnotion.ai/vendor/10web/photo-gallery) (49 CVEs)
- [Form Maker](https://radicalnotion.ai/vendor/10web/form-maker) (26 CVEs)
- [Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder](https://radicalnotion.ai/vendor/10web/form-maker-by-10web-mobile-friendly-drag-and-drop-contact-form-builder) (20 CVEs)
- [Photo Gallery by 10Web – Mobile-Friendly Image Gallery](https://radicalnotion.ai/vendor/10web/photo-gallery-by-10web-mobile-friendly-image-gallery) (15 CVEs)
- [Photo Gallery by 10Web](https://radicalnotion.ai/vendor/10web/photo-gallery-by-10web) (6 CVEs)
- [10Web Booster – Website speed optimization, Cache & Page Speed optimizer](https://radicalnotion.ai/vendor/10web/10web-booster-website-speed-optimization-cache-and-page-speed-optimizer) (5 CVEs)
- [PhotoGallery](https://radicalnotion.ai/vendor/10web/photogallery) (5 CVEs)
- [Slider by 10Web](https://radicalnotion.ai/vendor/10web/slider-by-10web) (5 CVEs)

---

Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/10web/slider). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.