High severity7.2NVD Advisory· Published May 8, 2023· Updated Jun 17, 2026

CVE-2023-2114

Description

The NEX-Forms WordPress plugin before 8.4 does not properly escape the table parameter, which is populated with user input, before concatenating it to an SQL query.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Basixonline/Nex Forms
cpe:2.3:a:basixonline:nex-forms:*:*:*:*:*:wordpress:*:*
Range: <8.4
WordPress/Nex Forms Litecpe-rescue
Package: https://wordpress.org/plugins/nex-forms-lite
WordPress/NEX-Formsllm-fuzzy
Range: <8.4

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/3d8ab3a5-1bf8-4216-91fa-e89541e5c43dnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.036
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000