VYPR

NEX-Forms – Ultimate Form Builder

by WordPress

CVEs (2)

  • CVE-2024-1130MedFeb 29, 2024
    risk 0.34cvss 5.3epss 0.01

    The NEX-Forms – Ultimate Form Builder – Contact forms and much more plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the set_read() function in all versions up to, and including, 8.5.6. This makes it possible for authenticated…

  • CVE-2024-1129MedFeb 29, 2024
    risk 0.34cvss 5.3epss 0.01

    The NEX-Forms – Ultimate Form Builder – Contact forms and much more plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the set_starred() function in all versions up to, and including, 8.5.6. This makes it possible for authenticated…