BA
Vendor
Basixonline
21
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-3468 | NE Nex-forms Basixonline | 5.4 | May 8 | NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.9.1 - Authenticated (Custom) Stored Cross-Site Scripting |
| CVE-2025-4208 | NE Nex-forms Basixonline | 6.3 | May 8 | NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.9.1 - Authenticated (Custom) Limited Code Execution via get_table_records Function |
| CVE-2024-10862 | NE Nex-forms Basixonline | 4.9 | Dec 25 | NEX-Forms <= 8.7.15 - Authenticated (Admin+) SQL Injection |
| CVE-2024-53808 | NE Nex-forms Basixonline | 7.2 | Dec 6 | WordPress NEX-Forms plugin <= 8.7.8 - SQL Injection vulnerability |
| CVE-2024-47389 | NE Nex-forms Basixonline | 6.1 | Oct 5 | WordPress NEX-Forms plugin <= 8.7.3 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2024-37512 | NE Nex-forms Basixonline | 5.4 | Jul 21 | WordPress NEX-Forms – Ultimate Form Builder plugin <= 8.5.10 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-25593 | NE Nex-forms Basixonline | 5.4 | Mar 15 | WordPress NEX-Forms plugin <= 8.5.5 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-1130 | NE Nex-forms Basixonline | 4.3 | Feb 1 | NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via set_read() |
| CVE-2024-1129 | NE Nex-forms Basixonline | 4.3 | Feb 1 | NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via set_starred() |
| CVE-2024-0907 | NE Nex-forms Basixonline | 4.3 | Feb 1 | NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via restore_records() |
| CVE-2023-52120 | NE Nex-forms Basixonline | 8.8 | Jan 5 | WordPress NEX-Forms – Ultimate Form Builder Plugin <= 8.5.2 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-50838 | NE Nex-forms Basixonline | 7.2 | Dec 28 | WordPress NEX-Forms – Ultimate Form Builder Plugin <= 8.5.5 is vulnerable to SQL Injection |
| CVE-2023-0439 | NE Nex-forms Basixonline | 5.4 | Jul 17 | NEX-Forms < 8.4.4 - Authenticated Stored XSS |
| CVE-2023-2114 | NE Nex-forms Basixonline | 7.2 | May 8 | The NEX-Forms WordPress plugin before 8.4 does not properly escape the `table` parameter, which is populated with user input, before concatenating it to an SQL query |
| CVE-2023-0272 | NE Nex-forms Basixonline | 5.4 | Mar 27 | The NEX-Forms WordPress plugin before 8.3.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed,… |
| CVE-2020-36670 | NE Nex-forms Basixonline | 6.3 | Mar 7 | The NEX-Forms. plugin for WordPress is vulnerable to unauthorized disclosure and modification of data in versions up to, and including 7.7.1 due to missing capability checks on… |
| CVE-2022-3142 | NE Nex-forms Basixonline | 8.8 | Sep 19 | The NEX-Forms WordPress plugin before 7.9.7 does not properly sanitise and escape user input before using it in SQL statements, leading to SQL injections |
| CVE-2021-24705 | NE Nex-forms Basixonline | 4.8 | Dec 13 | The NEX-Forms WordPress plugin before 8.4.3 does not have CSRF checks in place when editing a form, and does not escape some of its settings as well as form fields before… |
| CVE-2021-34676 | NE Nex-forms Basixonline | 7.5 | Jul 19 | Basix NEX-Forms through 7.8.7 allows authentication bypass for Excel report generation |
| CVE-2021-34675 | NE Nex-forms Basixonline | 7.5 | Jul 19 | Basix NEX-Forms through 7.8.7 allows authentication bypass for stored PDF reports |
| CVE-2015-9452 | NE Nex-forms Basixonline | 9.8 | Oct 7 | The nex-forms-express-wp-form-builder plugin before 4.6.1 for WordPress has SQL injection via the wp-admin/admin.php?page=nex-forms-main nex_forms_Id parameter |