Vulnerability index

Browse CVEs

16 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Nex Forms MEDIUM 6.3
CVE-2025-4208

The NEX-Forms – Ultimate Form Builder – Contact forms and much more plugin for WordPress is vulnerable to Limited Code Execution in all versions up t…

Fix: after 8.9.2
Fix from $1,600 2025-05-08
Nex Forms MEDIUM 5.4
CVE-2025-3468

The NEX-Forms – Ultimate Form Builder – Contact forms and much more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the clean_h…

Fix: 8.9.2+
Fix from $1,600 2025-05-08
Nex Forms HIGH 7.2
CVE-2024-53808

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Basix NEX-Forms nex-forms-express-wp-form-build…

Fix: 8.7.9+
Fix from $1,950 2024-12-06
Nex Forms MEDIUM 6.1
CVE-2024-47389

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NEX-Forms nex-forms-express-wp-form-build…

Fix: 8.7.4+
Fix from $1,600 2024-10-05
Nex Forms MEDIUM 5.4
CVE-2024-37512

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Basix NEX-Forms – Ultimate Form Builder …

Fix: 8.6.1+
Fix from $1,600 2024-07-21
Nex Forms MEDIUM 5.4
CVE-2024-25593

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NEX-Forms – Ultimate Form Builder allows …

Fix: 8.5.6+
Fix from $1,600 2024-03-15
Nex Forms HIGH 8.8
CVE-2023-52120

Cross-Site Request Forgery (CSRF) vulnerability in Basix NEX-Forms – Ultimate Form Builder – Contact forms and much more.This issue affects NEX-Forms…

Fix: after 8.5.2
Fix from $1,950 2024-01-05
Nex Forms HIGH 7.2
CVE-2023-50838

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Basix NEX-Forms – Ultimate Form Builder – Conta…

Fix: after 8.5.5
Fix from $1,950 2023-12-28
Nex Forms MEDIUM 5.4
CVE-2023-0439

The NEX-Forms WordPress plugin before 8.4.4 does not escape its form name, which could lead to Stored Cross-Site Scripting issues. By default only Su…

Fix: 8.4.4+
Fix from $1,600 2023-07-17
Nex Forms HIGH 7.2
CVE-2023-2114EPSS 45%

The NEX-Forms WordPress plugin before 8.4 does not properly escape the `table` parameter, which is populated with user input, before concatenating it…

Fix: 8.4+
Fix from $1,950 2023-05-08
Nex Forms MEDIUM 5.4
CVE-2023-0272

The NEX-Forms WordPress plugin before 8.3.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post …

Fix: 8.3.3+
Fix from $1,600 2023-03-27
Nex Forms MEDIUM 6.3
CVE-2020-36670

The NEX-Forms. plugin for WordPress is vulnerable to unauthorized disclosure and modification of data in versions up to, and including 7.7.1 due to m…

Fix: after 7.7.1
Fix from $1,600 2023-03-07
Nex Forms HIGH 8.8
CVE-2022-3142EPSS 11%

The NEX-Forms WordPress plugin before 7.9.7 does not properly sanitise and escape user input before using it in SQL statements, leading to SQL inject…

Fix: 7.9.7+
Fix from $1,950 2022-09-19
Nex Forms HIGH 7.5
CVE-2021-34675

Basix NEX-Forms through 7.8.7 allows authentication bypass for stored PDF reports.

Fix: after 7.8.7
Fix from $1,950 2021-07-19
Nex Forms HIGH 7.5
CVE-2021-34676

Basix NEX-Forms through 7.8.7 allows authentication bypass for Excel report generation.

Fix: after 7.8.7
Fix from $1,950 2021-07-19
Nex Forms CRITICAL 9.8
CVE-2015-9452

The nex-forms-express-wp-form-builder plugin before 4.6.1 for WordPress has SQL injection via the wp-admin/admin.php?page=nex-forms-main nex_forms_Id…

Fix: 4.6.1+
Fix from $2,300 2019-10-07