Login Request a demo
NE
Product
Nex-forms
by Basixonline · last CVE May 8, 2025
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities21In the news0Timeline
Severity mix
Critical 1High 7Medium 13Low 0
Severity
All severities21Critical1High7Medium13Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Nex-forms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-4208
6.3
0%
May 8
NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.9.1 - Authenticated (Custom) Limited Code Execution via get_table_records Function
Affected: through 8.9.2
CVE-2020-36670
6.3
1%
Mar 7
NEX-Forms <= 7.7.1 - Missing Authorization on Various AJAX Actions
Affected: through 7.7.1
CVE-2024-47389
6.1
0%
Oct 5
WordPress NEX-Forms plugin <= 8.7.3 - Reflected Cross Site Scripting (XSS) vulnerability
Affected: before 8.7.4
CVE-2025-3468
5.4
0%
May 8
NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.9.1 - Authenticated (Custom) Stored Cross-Site Scripting
Affected: before 8.9.2
CVE-2024-37512
5.4
0%
Jul 21
WordPress NEX-Forms – Ultimate Form Builder plugin <= 8.5.10 - Cross Site Scripting (XSS) vulnerability
Affected: before 8.6.1
CVE-2024-25593
5.4
0%
Mar 15
WordPress NEX-Forms plugin <= 8.5.5 - Cross Site Scripting (XSS) vulnerability
Affected: before 8.5.6
CVE-2023-0439
5.4
0%
Jul 17
NEX-Forms < 8.4.4 - Authenticated Stored XSS
Affected: before 8.4.4
CVE-2023-0272
5.4
1%
Mar 27
NEX-Forms < 8.3.3 - Contributor+ Stored XSS
Affected: before 8.3.3
CVE-2024-10862
4.9
1%
Dec 25
NEX-Forms <= 8.7.15 - Authenticated (Admin+) SQL Injection
Affected: through 8.7.13
CVE-2021-24705
4.8
0%
Dec 13
The NEX-Forms WordPress plugin before 8.4.3 does not have CSRF checks in place when editing a form, and does not escape some of its settings as well as form fields before…
Affected: through 7.9.4
CVE-2024-1130
4.3
1%
Feb 1
NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via set_read()
Affected: before 8.5.7
CVE-2024-1129
4.3
1%
Feb 1
NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via set_starred()
Affected: before 8.5.7
CVE-2024-0907
4.3
1%
Feb 1
NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via restore_records()
Affected: before 8.5.7
Showing 13