WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
nex-forms-express-wp-form-builder
Published
2021-11-15
Title
NEX-Forms < 8.4.3 - Stored Cross-Site Scripting via CSRF
Slug
nex-forms-express-wp-form-builder
Published
2022-08-01
Title
NEX-Forms < 7.9.7 - Authenticated SQLi
Slug
nex-forms-express-wp-form-builder
Published
2023-02-28
Title
NEX-Forms < 8.3.3 - Contributor+ Stored XSS
Slug
nex-forms-express-wp-form-builder
Published
2020-11-27
Title
NEX-Forms < 7.8 - Subscriber+ Unauthorised AJAX Calls
Slug
nex-forms-express-wp-form-builder
Published
2023-04-17
Title
NEX-Forms < 8.4 - Admin+ SQL Injection
Slug
nex-forms-express-wp-form-builder
Published
2023-06-26
Title
NEX-Forms < 8.4.4 - Authenticated Stored XSS
Slug
nex-forms-express-wp-form-builder
Published
2023-12-21
Title
NEX-Forms – Ultimate Form Builder – Contact forms and much more < 8.5.6 - Authenticated (Admin+) SQL Injection
Slug
nex-forms-express-wp-form-builder
Published
2023-12-28
Title
NEX-Forms – Ultimate Form Builder < 8.5.5 - Cross-Site Request Forgery
Slug
nex-forms-express-wp-form-builder
Published
2024-01-31
Title
NEX-Forms – Ultimate Form Builder – Contact forms and much more < 8.5.7 - Missing Authorization via restore_records()
Slug
nex-forms-express-wp-form-builder
Published
2024-01-31
Title
NEX-Forms – Ultimate Form Builder – Contact forms and much more < 8.5.7 - Missing Authorization via set_starred()
Slug
nex-forms-express-wp-form-builder
Published
2024-01-31
Title
NEX-Forms – Ultimate Form Builder – Contact forms and much more < 8.5.7 - Missing Authorization via set_read()
Slug
nex-forms-express-wp-form-builder
Published
2024-02-12
Title
NEX-Forms – Ultimate Form Builder < 8.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Slug
nex-forms-express-wp-form-builder
Published
2024-07-05
Title
NEX-Forms – Ultimate Form Builder < 8.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
nex-forms-express-wp-form-builder
Published
2024-09-30
Title
NEX-Forms – Ultimate Form Builder < 8.7.4 - Reflected Cross-Site Scripting
Slug
nex-forms-express-wp-form-builder
Published
2024-12-02
Title
NEX-Forms – Ultimate Form Builder < 8.7.9 - Authenticated (Administrator+) SQL Injection
Slug
nex-forms-express-wp-form-builder
Published
2024-12-24
Title
NEX-Forms < 8.7.16 - Authenticated (Admin+) SQL Injection
Slug
nex-forms-express-wp-form-builder
Published
2025-03-11
Title
NEX-Forms – Ultimate Form Builder – Contact forms and much more < 8.8.2 - Unauthenticated Sensitive Information Exposure
Slug
nex-forms-express-wp-form-builder
Published
2025-05-07
Title
NEX-Forms – Ultimate Form Builder – Contact forms and much more < 8.9.2 - Authenticated (Custom) Stored Cross-Site Scripting
Slug
nex-forms-express-wp-form-builder
Published
2025-05-07
Title
NEX-Forms – Ultimate Form Builder – Contact forms and much more < 8.9.2 - Authenticated (Custom) Limited Code Execution via get_table_records Function
Slug
nex-forms-express-wp-form-builder
Published
2025-08-20
Title
NEX-Forms < 9.1.4 - Cross-Site Request Forgery
Slug
nex-forms-express-wp-form-builder
Published
2025-10-10
Title
NEX-Forms – Ultimate Forms Plugin for WordPress < 9.1.7 - Authenticated (Admin+) SQL Injection
Slug
nex-forms-express-wp-form-builder
Published
2025-12-19
Title
Nex-Forms Express WP Form Builder < 9.1.8 - Authenticated Stored XSS
Slug
nex-forms-lite
Published
2025-10-01
Title
NEX-Forms LITE < 8.2 - Unauthenticated Stored Cross-Site Scripting
Slug
nexa-blocks
Published
2025-06-05
Title
Nexa Blocks <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
nexa-blocks
Published
2025-06-05
Title
Nexa Blocks <= 1.1.0 - Authenticated (Contributor+) Server-Side Request Forgery