NEX-Forms
Basix
Developer
9.3.2
Latest version
6,000
Installations
No date
Last updated
Vulnerability history
0 present
34 patched
11 Mitigation rules
- Authenticated (Admin+) SQL Injection via 'additional_params' Parameter vulnerability<= 9.2.418/08/2026
- Authenticated (Admin+) Arbitrary File Deletion vulnerability<= 9.2.331/07/2026
- Missing Authorization to Unauthenticated Arbitrary Form Entry Modification vulnerability<= 9.2.210/07/2026
- Cross Site Scripting (XSS) vulnerability<= 9.2.210/07/2026
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 9.2.206/07/2026
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 9.2.201/07/2026
- Missing Authorization to Unauthenticated Sensitive Information Disclosure vulnerability<= 9.2.226/06/2026
- Authenticated (Administrator+) SQL Injection vulnerability<= 9.1.1214/05/2026
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 9.1.1106/05/2026
- WordPress NEX-Forms - Ultimate Forms Plugin for WordPress plugin <= 9.1.9 - Missing Authorization to Unauthenticated Arbitrary Form Entry Modification via nf_set_entry_update_id vulnerability<= 9.1.917/03/2026
- WordPress NEX-Forms - Ultimate Forms Plugin for WordPress plugin <= 9.1.9 - Missing Authorization to Authenticated (Subscriber+) License Deactivation via deactivate_license vulnerability<= 9.1.916/03/2026
- Reflected Cross Site Scripting (XSS) vulnerability<= 9.1.709/02/2026
- Cross Site Scripting (XSS) vulnerability<= 9.1.704/02/2026
- WordPress NEX-Forms - Ultimate Form Builder - Contact forms and much more plugin <= 8.5.6 - Missing Authorization via restore_records() vulnerability<= 8.5.603/02/2026
- WordPress NEX-Forms - Ultimate Form Builder - Contact forms and much more plugin <= 8.5.6 - Missing Authorization via set_starred() vulnerability<= 8.5.603/02/2026
- WordPress NEX-Forms - Ultimate Forms Plugin for WordPress plugin <= 9.1.8 - Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability<= 9.1.830/01/2026
- Authenticated Stored XSS vulnerability< 9.1.812/01/2026
- Authenticated (Admin+) SQL Injection vulnerability<= 9.1.610/10/2025
- Cross Site Request Forgery (CSRF) Vulnerability<= 9.1.320/08/2025
- Authenticated (Custom) Limited Code Execution via get_table_records Function vulnerability<= 8.9.108/05/2025
- Authenticated (Custom) Stored Cross-Site Scripting vulnerability<= 8.9.108/05/2025
- Unauthenticated Sensitive Information Exposure vulnerability<= 8.8.111/03/2025
- Authenticated (Admin+) SQL Injection vulnerability<= 8.7.1524/12/2024
- SQL Injection vulnerability<= 8.7.802/12/2024
- Reflected Cross Site Scripting (XSS) vulnerability<= 8.7.330/09/2024
- Cross Site Scripting (XSS) vulnerability<= 8.5.1005/07/2024
- Cross Site Scripting (XSS) vulnerability<= 8.5.512/02/2024
- Multiple Missing Authorization vulnerability<= 8.5.601/02/2024
- Cross Site Request Forgery (CSRF) vulnerability<= 8.5.228/12/2023
- SQL Injection vulnerability<= 8.5.521/12/2023
- Auth. SQL Injection (SQLi) vulnerability< 8.425/04/2023
- Contributor+ Stored XSS vulnerability< 8.3.328/03/2023
- Authenticated SQL Injection (SQLi) vulnerability<= 7.9.601/08/2022
- Multiple Stored Cross-Site Scripting (XSS) vulnerabilities<= 8.215/11/2021