A vulnerability marked as critical has been reported in 10web Form Maker Plugin up to 1.15.43 on WordPress. Affected is an unknown function. The manipulation of the argument Name leads to sql injection. This vulnerability is listed as CVE-2026-11777 . The attack may be initiated remotely. There is no available exploit.