Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

NEX-Forms — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in NEX-Forms, with AI-generated Chinese analysis, references, and POCs.

Vendor: Unknown

CVE IDTitleCVSSSeverityPublished
CVE-2026-10525 NEX-Forms < 9.2.3 - Unauthenticated Stored XSS via Form Submission --2026-07-17
CVE-2026-57668 WordPress NEX-Forms plugin <= 9.2.2 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High2026-07-13
CVE-2025-69326 WordPress NEX-Forms plugin <= 9.1.7 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High2026-02-20
CVE-2025-69324 WordPress NEX-Forms plugin <= 9.1.7 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High2026-02-20
CVE-2025-14803 Nex-Forms Express WP Form Builder < 9.1.8 - Authenticated Stored XSS 5.4 -2026-01-09
CVE-2025-49399 WordPress NEX-Forms Plugin <= 9.1.3 - Cross Site Request Forgery (CSRF) Vulnerability CWE-352 8.8 High2025-08-20
CVE-2024-53808 WordPress NEX-Forms plugin <= 8.7.8 - SQL Injection vulnerability CWE-89 8.5 High2024-12-06
CVE-2024-47389 WordPress NEX-Forms plugin <= 8.7.3 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High2024-10-05
CVE-2023-0439 NEX-Forms < 8.4.4 - Authenticated Stored XSS 4.8 -2023-07-17
CVE-2023-2114 NEX-Forms < 8.4 - Admin+ SQL Injection 9.8 -2023-05-08
CVE-2023-0272 NEX-Forms < 8.3.3 - Contributor+ Stored XSS 5.4 -2023-03-27
CVE-2021-24705 NEX-Forms < 8.4.3 - Stored Cross-Site Scripting via CSRF 6.1 -2021-12-13

All 12 known CVE vulnerabilities affecting NEX-Forms with full Chinese analysis, references, and POCs where available.