Log in Start free

Basix

Products

ProductCVEsExploitedLatest
NEX-Forms7–Oct 9, 2026
NEX-Forms – Ultimate Form Builder2–Jul 21, 2024
NEX-Forms – Ultimate Form Builder – Contact forms and much more2–Jan 5, 2024
NEX-Forms LITE1–Oct 22, 2025

Exploited and recent CVEs

  • CVE-2026-96607 High 7.1 WordPress NEX-Forms plugin <= 9.3.1 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-57668 High 7.1 WordPress NEX-Forms plugin <= 9.2.2 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-69326 High 7.1 WordPress NEX-Forms plugin <= 9.1.7 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-69324 High 7.1 WordPress NEX-Forms plugin <= 9.1.7 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-58966 High 7.1 WordPress NEX-Forms LITE plugin < 8.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-49399 High 8.8 WordPress NEX-Forms Plugin <= 9.1.3 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
  • CVE-2024-53808 High 8.5 WordPress NEX-Forms plugin <= 8.7.8 - SQL Injection vulnerability 0.6%
  • CVE-2024-47389 High 7.1 WordPress NEX-Forms plugin <= 8.7.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-37512 Medium 6.5 WordPress NEX-Forms – Ultimate Form Builder plugin <= 8.5.10 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-25593 Medium 6.5 WordPress NEX-Forms plugin <= 8.5.5 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-52120 Medium 5.4 WordPress NEX-Forms – Ultimate Form Builder Plugin <= 8.5.2 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%
  • CVE-2023-50838 High 7.6 WordPress NEX-Forms – Ultimate Form Builder Plugin <= 8.5.5 is vulnerable to SQL Injection 0.6%