agentprime: webaways-nex-forms-ultimate-forms-plugin-for-wordpressEvery new CVE for webaways-nex-forms-ultimate-forms-plugin-for-wordpress.https://agentprime.io/CVE-2026-96767: NEX-Forms <= 9.3.2 - Unauthenticated Stored Cross-Site Scripting via Content-Type Headerhttps://agentprime.io/advisories/CVE-2026-96767/https://agentprime.io/advisories/CVE-2026-96767/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 11:27:14 GMTCVECVE-2026-75961: NEX-Forms <= 9.3.0 - Authenticated (Administrator+) SQL Injection via 'operator' Key of the 'additional_params' Parameterhttps://agentprime.io/advisories/CVE-2026-75961/https://agentprime.io/advisories/CVE-2026-75961/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 07:40:01 GMTCVECVE-2026-15602: NEX-Forms <= 9.2.4 - Authenticated (Admin+) SQL Injection via 'additional_params' Parameterhttps://agentprime.io/advisories/CVE-2026-15602/https://agentprime.io/advisories/CVE-2026-15602/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 16 Aug 2026 04:24:50 GMTCVECVE-2026-15450: NEX-Forms <= 9.2.3 - Authenticated (Admin+) Arbitrary File Deletion via Path Traversal via 'location' Parameterhttps://agentprime.io/advisories/CVE-2026-15450/https://agentprime.io/advisories/CVE-2026-15450/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 01 Aug 2026 07:49:51 GMTCVECVE-2026-9017: NEX-Forms <= 9.2.2 - Missing Authorization to Unauthenticated Arbitrary Form Entry Modification via nf_send_nf_email AJAX Actionhttps://agentprime.io/advisories/CVE-2026-9017/https://agentprime.io/advisories/CVE-2026-9017/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 11 Jul 2026 06:50:32 GMTCVECVE-2026-13040: NEX-Forms <= 9.2.2 - Unauthenticated Stored Cross-Site Scripting via 'real_val__' Parameterhttps://agentprime.io/advisories/CVE-2026-13040/https://agentprime.io/advisories/CVE-2026-13040/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jul 2026 04:30:17 GMTCVECVE-2026-12142: NEX-Forms <= 9.2.2 - Unauthenticated Stored Cross-Site Scripting via '_name[]' Array Parameterhttps://agentprime.io/advisories/CVE-2026-12142/https://agentprime.io/advisories/CVE-2026-12142/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jul 2026 09:32:28 GMTCVECVE-2026-12404: NEX-Forms <= 9.2.2 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via CSVExport Classhttps://agentprime.io/advisories/CVE-2026-12404/https://agentprime.io/advisories/CVE-2026-12404/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 27 Jun 2026 05:33:44 GMTCVECVE-2026-7046: NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.1.12 - Authenticated (Administrator+) SQL Injection via 'table' Parameterhttps://agentprime.io/advisories/CVE-2026-7046/https://agentprime.io/advisories/CVE-2026-7046/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 15 May 2026 07:46:37 GMTCVECVE-2026-5063: NEX-Forms <= 9.1.11 - Unauthenticated Stored Cross-Site Scripting via POST Parameter Key Nameshttps://agentprime.io/advisories/CVE-2026-5063/https://agentprime.io/advisories/CVE-2026-5063/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 03 May 2026 04:25:49 GMTCVECVE-2026-1947: NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.1.9 - Missing Authorization to Unauthenticated Arbitrary Form Entry Modification via nf_set_entry_update_idhttps://agentprime.io/advisories/CVE-2026-1947/https://agentprime.io/advisories/CVE-2026-1947/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 15 Mar 2026 01:19:06 GMTCVECVE-2026-1948: NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.1.9 - Missing Authorization to Authenticated (Subscriber+) License Deactivation via deactivate_licensehttps://agentprime.io/advisories/CVE-2026-1948/https://agentprime.io/advisories/CVE-2026-1948/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 14 Mar 2026 03:24:14 GMTCVECVE-2025-15510: NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.1.8 - Missing Authorization to Unauthenticated Sensitive Information Exposurehttps://agentprime.io/advisories/CVE-2025-15510/https://agentprime.io/advisories/CVE-2025-15510/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 31 Jan 2026 01:23:02 GMTCVECVE-2025-10185: NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.1.6 - Authenticated (Admin+) SQL Injectionhttps://agentprime.io/advisories/CVE-2025-10185/https://agentprime.io/advisories/CVE-2025-10185/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 11 Oct 2025 07:25:58 GMTCVECVE-2025-3468: NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.9.1 - Authenticated (Custom) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2025-3468/https://agentprime.io/advisories/CVE-2025-3468/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 May 2025 11:13:44 GMTCVECVE-2025-4208: NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.9.1 - Authenticated (Custom) Limited Code Execution via get_table_records Functionhttps://agentprime.io/advisories/CVE-2025-4208/https://agentprime.io/advisories/CVE-2025-4208/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 May 2025 11:13:44 GMTCVECVE-2024-13498: NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.8.1 - Unauthenticated Sensitive Information Exposurehttps://agentprime.io/advisories/CVE-2024-13498/https://agentprime.io/advisories/CVE-2024-13498/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Mar 2025 05:22:52 GMTCVECVE-2024-10862: NEX-Forms <= 8.7.15 - Authenticated (Admin+) SQL Injectionhttps://agentprime.io/advisories/CVE-2024-10862/https://agentprime.io/advisories/CVE-2024-10862/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Dec 2024 06:42:14 GMTCVECVE-2024-1130: NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via set_read()https://agentprime.io/advisories/CVE-2024-1130/https://agentprime.io/advisories/CVE-2024-1130/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Feb 2024 04:31:55 GMTCVECVE-2024-1129: NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via set_starred()https://agentprime.io/advisories/CVE-2024-1129/https://agentprime.io/advisories/CVE-2024-1129/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Feb 2024 04:31:54 GMTCVECVE-2024-0907: NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via restore_records()https://agentprime.io/advisories/CVE-2024-0907/https://agentprime.io/advisories/CVE-2024-0907/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Feb 2024 04:31:54 GMTCVECVE-2020-36670: NEX-Forms <= 7.7.1 - Missing Authorization on Various AJAX Actionshttps://agentprime.io/advisories/CVE-2020-36670/https://agentprime.io/advisories/CVE-2020-36670/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Mar 2023 15:34:03 GMTCVE