NE
Product
Nex-forms
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 7Medium 13Low 0
Watch
Add Nex-forms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-52120 | 8.8 | Jan 5 | WordPress NEX-Forms – Ultimate Form Builder Plugin <= 8.5.2 is vulnerable to Cross Site Request Forgery (CSRF) Affected: through 8.5.2 |
| CVE-2022-3142 | 8.8 | Sep 19 | The NEX-Forms WordPress plugin before 7.9.7 does not properly sanitise and escape user input before using it in SQL statements, leading to SQL injections Affected: before 7.9.7 |
| CVE-2021-34676 | 7.5 | Jul 19 | Basix NEX-Forms through 7.8.7 allows authentication bypass for Excel report generation Affected: through 7.8.7 |
| CVE-2021-34675 | 7.5 | Jul 19 | Basix NEX-Forms through 7.8.7 allows authentication bypass for stored PDF reports Affected: through 7.8.7 |
| CVE-2024-53808 | 7.2 | Dec 6 | WordPress NEX-Forms plugin <= 8.7.8 - SQL Injection vulnerability Affected: before 8.7.9 |
| CVE-2023-50838 | 7.2 | Dec 28 | WordPress NEX-Forms – Ultimate Form Builder Plugin <= 8.5.5 is vulnerable to SQL Injection Affected: through 8.5.5 |
| CVE-2023-2114 | 7.2 | May 8 | The NEX-Forms WordPress plugin before 8.4 does not properly escape the `table` parameter, which is populated with user input, before concatenating it to an SQL query Affected: before 8.4 |
Showing 7