NEX-Forms vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

NE

Product

NEX-Forms

by Basix · last CVE Oct 9, 2026

7

CVEs

0

On KEV

8.8

Max CVSS

1

New 30D

Vulnerabilities7 In the news0 Timeline

Severity mix

Critical 0High 6Medium 1Low 0

Severity

All severities7 Critical0 High6 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add NEX-Forms to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-49399	8.8	0%	Aug 20	WordPress NEX-Forms Plugin <= 9.1.3 - Cross Site Request Forgery (CSRF) Vulnerability Affected: through 9.1.3
CVE-2024-53808	7.2	1%	Dec 6	WordPress NEX-Forms plugin <= 8.7.8 - SQL Injection vulnerability Affected: through 8.7.8
CVE-2026-96607	7.1	0%	Oct 9	WordPress NEX-Forms plugin <= 9.3.1 - Cross Site Scripting (XSS) vulnerability Affected: through 9.3.1
CVE-2026-57668	7.1	0%	Jul 13	WordPress NEX-Forms plugin <= 9.2.2 - Cross Site Scripting (XSS) vulnerability Affected: through 9.2.2
CVE-2025-69326	7.1	0%	Feb 20	WordPress NEX-Forms plugin <= 9.1.7 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 9.1.7
CVE-2025-69324	7.1	0%	Feb 20	WordPress NEX-Forms plugin <= 9.1.7 - Cross Site Scripting (XSS) vulnerability Affected: through 9.1.7
CVE-2024-47389	6.1	0%	Oct 5	WordPress NEX-Forms plugin <= 8.7.3 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 8.7.3