Approved changes feed: RSS · Atom

cpe:2.3:a:basix:nex-forms_–_ultimate_form_builder_–_contact_forms_and_much_more:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBasix (42e71067-99cc-5ade-9083-877ce15116a5)
ProductNex Forms – Ultimate Form Builder – Contact Forms And Much More (5d1c1aa8-1abe-57d4-a07c-53457f544d9b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-52120 vulnerable 2026-06-08 06:17:54.292001 WordPress NEX-Forms – Ultimate Form Builder Plugin <= 8.5.2 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (5.4)
Cross-Site Request Forgery (CSRF) vulnerability in Basix NEX-Forms – Ultimate Form Builder – Contact forms and much more.This issue affects NEX-Forms – Ultimate Form Builder – Contact forms and much more: from n/a through 8.5.2.
Published: 2024-01-05T09:25:36.560Z
Updated: 2026-04-28T16:09:05.059Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50838 vulnerable 2026-06-08 06:16:16.833186 WordPress NEX-Forms – Ultimate Form Builder Plugin <= 8.5.5 is vulnerable to SQL Injection
HIGH (7.6)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Basix NEX-Forms – Ultimate Form Builder – Contact forms and much more.This issue affects NEX-Forms – Ultimate Form Builder – Contact forms and much more: from n/a through 8.5.5.
Published: 2023-12-28T20:04:58.740Z
Updated: 2026-04-28T16:08:59.277Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.