VulnSocial

CVE-2025-15441Disclosure

LOWCVSS 6.8 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

The Form Maker by 10Web WordPress plugin before 1.15.38 does not properly prepare SQL queries when the "MySQL Mapping" feature is in use, which could make SQL Injection attacks possible in certain contexts.

Back to dashboard
1.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 2 mentions (2026-04-13); latest day: 1
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-04-13: 2Mentions · 2026-04-27: 1PoC Mentioned / Linked · 2026-04-27: 1Technical Details · 2026-04-13: 2Technical Details · 2026-04-27: 104-1304-27
Signal classification2 categories
Disclosure
266.7%
PoC
133.3%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-04-132
Disclosure2
2026-04-271
PoC1
Full discourse3 posts
  • Atomic Edge@atomicedgeWAF
    PoC

    https://atomicedge.io/cve-proof/cve-2025-15441-form-maker-version-1-15-38-high-vulnerability-proof-of-concept CVE-2025-15441 form-maker (CVSS Score 7.5) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge

    Post summary

    A proof‑of‑concept for CVE-2025-15441 affecting Form Maker 1.15.38 is shared with a CVSS score of 7.5; no active exploitation or patch information is included.

    00000571
    6 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2025-15441 The Form Maker by 10Web WordPress plugin before 1.15.38 does not properly prepare SQL queries when the "MySQL Mapping" feature is in use, which could make SQL Inject… https://www.cve.org/CVERecord?id=CVE-2025-15441

    Post summary

    The post announces CVE-2025-15441, a SQL injection flaw in Form Maker by 10Web caused by improper query preparation when the MySQL Mapping feature is active.

    00000153
    57.1K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2025-15441 SQL Injection Vulnerability in Form Maker by 10Web WordPr... https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-15441 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2

    Post summary

    A SQL injection vulnerability in 10Web's Form Maker (CVE-2025-15441) is announced and linked to a details page; no PoC, exploit code, or active exploitation is reported.

    0000061
    4.0K followersView on X

Explore more

Back to dashboard