nex-forms_ultimate_forms_plugin_for_wordpress vulnerabilities
CVEs whose affected-version data names the nex-forms_ultimate_forms_plugin_for_wordpress package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-96767High· 7.2NEX-Forms <= 9.3.2 - Unauthenticated Stored Cross-Site Scripting via Content-Type Header
The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' parameter in all versions up to, and including, 9.3.2 due to insufficient input sanitization and output …
▾ Twilightwebaways · NEX-Forms – Ultimate Forms Plugin for WordPressEPSS 0.42%via CVEORG
CVE-2026-75961Medium· 4.9The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to generic SQL Injection via the 'additional_params' parameter in all versions up to, and including, 9.3.0 due to insufficient escaping on the user su…
The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to generic SQL Injection via the 'additional_params' parameter in all versions up to, and including, 9.3.0 due to insufficient escaping on the user su…
▾ Sunlitwebaways · NEX-Forms – Ultimate Forms Plugin for WordPressEPSS 0.51%via NVD