Vulnerabilities / NEX-Forms – Ultimate Forms Plugin for WordPress
NEX-Forms – Ultimate Forms Plugin for WordPress vulnerabilities
Advisories WPSec published for NEX-Forms – Ultimate Forms Plugin for WordPress. Other sources may list more. Its attack surface: NEX-Forms – Ultimate Forms Plugin for WordPress on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-21 | WPSEC-2026-1306 | NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.3.2 - Unauthenticated Stored Cross-Site Scripting via Form Submission Data | High 7.2 | 9.3.3 |
License: CC BY 4.0