A vulnerability labeled as critical has been found in 10Web Form Maker Plugin up to 1.15.44 on WordPress. The affected element is an unknown function. The manipulation results in sql injection. This vulnerability is cataloged as CVE-2026-16977 . The attack may be launched remotely. There is no exploit available. The affected component should be upgraded.