NEX-Forms – Ultimate Form Builder

Forms plugin <= 8.9.1 Authenticated (Custom) Limited Code Execution via get_table_records Function vulnerability <= 8.9.1

Forms plugin <= 8.9.1 Authenticated (Custom) Stored CrossSite Scripting vulnerability <= 8.9.1

Forms – Ultimate Form Builder – Contact forms and much more plugin <= 8.8.1 Unauthenticated Sensitive Information Exposure vulnerability <= 8.8.1

Forms plugin <= 8.7.15 Authenticated (Admin+) SQL Injection vulnerability <= 8.7.15

Forms plugin <= 8.7.8 SQL Injection vulnerability <= 8.7.8