Unknown NEX-Forms vulnerabilities

CVEs per yearBy the year they were published

1. 20211
2. 20233
3. 20263

Newest CVEs

• CVE-2026-106166

  NEX-Forms 9.2.1 - 9.2.5 - Unauthenticated Arbitrary Form Entry Modification via 'nf_set_entry_update_id' Parameter

  Unknown · NEX-Forms

  Medium5.3
• CVE-2026-10525

  NEX-Forms < 9.2.3 - Unauthenticated Stored XSS via Form Submission

  Unknown · NEX-Forms

  Medium6.1
• CVE-2025-14803

  Nex-Forms Express WP Form Builder < 9.1.8 - Authenticated Stored XSS

  Unknown · NEX-Forms

  Medium6.8
• CVE-2023-0439

  NEX-Forms < 8.4.4 - Authenticated Stored XSS

  Unknown · NEX-Forms

  Medium5.4
• CVE-2023-2114

  NEX-Forms < 8.4 - Admin+ SQL Injection

  Unknown · NEX-Forms

  High7.2
• CVE-2023-0272

  NEX-Forms < 8.3.3 - Contributor+ Stored XSS

  Unknown · NEX-Forms

  Medium5.4
• CVE-2021-24705

  NEX-Forms < 8.4.3 - Stored Cross-Site Scripting via CSRF

  Unknown · NEX-Forms

  Medium4.8