[■] Plugin de WordPress

NEX-Forms – Ultimate Forms Plugin for WordPress

44 expedientes en el radar

Comprueba tu versión de NEX-Forms – Ultimate Forms Plugin for WordPress Sólo las que se están explotando

[■] Registro

Vulnerabilidades (44)

7,2 Alta

CVE-2026-96767: cross-site scripting (XSS) en NEX-Forms – Ultimate Forms Plugin for WordPress

CVE-2026-96767

T−17d 28 oct. 2026
5,3 Media

CVE-2026-106166: acceso a datos de otros usuarios (IDOR) en NEX-Forms – Ultimate Forms Plugin for WordPress

CVE-2026-106166

T−31d 14 oct. 2026
6,4 Media

CVE-2026-96607: cross-site scripting (XSS) en NEX-Forms – Ultimate Forms Plugin for WordPress

CVE-2026-96607

T−41d 4 oct. 2026
4,9 Media

CVE-2026-75961: inyección SQL en NEX-Forms – Ultimate Forms Plugin for WordPress

CVE-2026-75961

T−58d 17 sept. 2026
4,9 Media

CVE-2026-15602: inyección SQL en NEX-Forms – Ultimate Forms Plugin for WordPress

CVE-2026-15602

T−91d 15 ago. 2026
8,1 Alta

CVE-2026-15450: recorrido de rutas (path traversal) en NEX-Forms – Ultimate Forms Plugin for WordPress

CVE-2026-15450

T−106d 31 jul. 2026
5,3 Media

CVE-2026-9017: falta de autorización en NEX-Forms – Ultimate Forms Plugin for WordPress

CVE-2026-9017

T−127d 10 jul. 2026
7,2 Alta

CVE-2026-57668: cross-site scripting (XSS) en NEX-Forms – Ultimate Forms Plugin for WordPress

CVE-2026-57668

T−127d 10 jul. 2026
7,2 Alta

CVE-2026-13040: cross-site scripting (XSS) en NEX-Forms – Ultimate Forms Plugin for WordPress

CVE-2026-13040

T−135d 2 jul. 2026
7,2 Alta

CVE-2026-12142: cross-site scripting (XSS) en NEX-Forms – Ultimate Forms Plugin for WordPress

CVE-2026-12142

T−137d 30 jun. 2026
5,3 Media

CVE-2026-12404: falta de autorización en NEX-Forms – Ultimate Forms Plugin for WordPress

CVE-2026-12404

T−141d 26 jun. 2026
7,2 Alta

CVE-2026-10525: cross-site scripting (XSS) en NEX-Forms – Ultimate Forms Plugin for WordPress

CVE-2026-10525

T−141d 26 jun. 2026
4,9 Media

CVE-2026-7046: inyección SQL en NEX-Forms – Ultimate Forms Plugin for WordPress

CVE-2026-7046

T−184d 14 may. 2026
7,2 Alta

CVE-2026-5063: cross-site scripting (XSS) en NEX-Forms – Ultimate Forms Plugin for WordPress

CVE-2026-5063

T−196d 2 may. 2026
7,5 Alta

CVE-2026-1947: acceso a datos de otros usuarios (IDOR) en NEX-Forms – Ultimate Forms Plugin for WordPress

CVE-2026-1947

T−245d 14 mar. 2026
4,3 Media

CVE-2026-1948: falta de autorización en NEX-Forms – Ultimate Forms Plugin for WordPress

CVE-2026-1948

T−246d 13 mar. 2026
6,1 Media

CVE-2025-69326: cross-site scripting (XSS) en NEX-Forms – Ultimate Forms Plugin for WordPress

CVE-2025-69326

T−278d 9 feb. 2026
7,2 Alta

CVE-2025-69324: cross-site scripting (XSS) en NEX-Forms – Ultimate Forms Plugin for WordPress

CVE-2025-69324

T−283d 4 feb. 2026
5,3 Media

CVE-2025-15510: falta de autorización en NEX-Forms – Ultimate Forms Plugin for WordPress

CVE-2025-15510

T−288d 30 ene. 2026
4,4 Media

CVE-2025-14803: cross-site scripting (XSS) en NEX-Forms – Ultimate Forms Plugin for WordPress

CVE-2025-14803

T−330d 19 dic. 2025
4,9 Media

CVE-2025-10185: inyección SQL en NEX-Forms – Ultimate Forms Plugin for WordPress

CVE-2025-10185

T−400d 10 oct. 2025
4,3 Media

CVE-2025-49399: falsificación de peticiones (CSRF) en NEX-Forms – Ultimate Forms Plugin for WordPress

CVE-2025-49399

T−451d 20 ago. 2025
6,3 Media

CVE-2025-4208: inyección de código en NEX-Forms – Ultimate Forms Plugin for WordPress

CVE-2025-4208

T−556d 7 may. 2025
6,4 Media

CVE-2025-3468: cross-site scripting (XSS) en NEX-Forms – Ultimate Forms Plugin for WordPress

CVE-2025-3468

T−556d 7 may. 2025
5,3 Media

CVE-2024-13498: exposición de información sensible en NEX-Forms – Ultimate Forms Plugin for WordPress

CVE-2024-13498

T−613d 11 mar. 2025
4,9 Media

CVE-2024-10862: inyección SQL en NEX-Forms – Ultimate Forms Plugin for WordPress

CVE-2024-10862

T−690d 24 dic. 2024
4,9 Media

CVE-2024-53808: inyección SQL en NEX-Forms – Ultimate Forms Plugin for WordPress

CVE-2024-53808

T−712d 2 dic. 2024
6,1 Media

CVE-2024-47389: cross-site scripting (XSS) en NEX-Forms – Ultimate Forms Plugin for WordPress

CVE-2024-47389

T−775d 30 sept. 2024
6,4 Media

CVE-2024-37512: cross-site scripting (XSS) en NEX-Forms – Ultimate Forms Plugin for WordPress

CVE-2024-37512

T−862d 5 jul. 2024
6,4 Media

CVE-2024-25593: cross-site scripting (XSS) en NEX-Forms – Ultimate Forms Plugin for WordPress

CVE-2024-25593

T−1006d 12 feb. 2024