WordPress plugin
NEX-Forms – Ultimate Forms Plugin for WordPress security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 44 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical2
- High12
- Medium30
- Low0
All NEX-Forms – Ultimate Forms Plugin for WordPress vulnerabilities
Nothing in this view
No vulnerabilities match this filter. Show all.
NEX-Forms – Ultimate Forms Plugin for WordPress: common questions
Does NEX-Forms – Ultimate Forms Plugin for WordPress have known vulnerabilities?
Yes. VulnCrest Radar lists 44 known vulnerabilities in NEX-Forms – Ultimate Forms Plugin for WordPress: 2 critical, 12 high, 30 medium. None are known to affect version null.
How do I check which version of NEX-Forms – Ultimate Forms Plugin for WordPress I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent NEX-Forms – Ultimate Forms Plugin for WordPress vulnerability?
CVE-2026-96767, published Oct 28, 2026: NEX-Forms <= 9.3.2 - Unauthenticated Stored Cross-Site Scripting via Content-Type Header. Severity: High (CVSS 7.2).
Is any NEX-Forms – Ultimate Forms Plugin for WordPress vulnerability listed in CISA KEV?
No. None of the known NEX-Forms – Ultimate Forms Plugin for WordPress vulnerabilities is currently listed in the CISA KEV catalog.