nex-forms_ultimate_forms_plugin_for_wordpress vulnerabilities

CVEs whose affected-version data names the nex-forms_ultimate_forms_plugin_for_wordpress package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-75961Medium· 4.9

1w ago

The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to generic SQL Injection via the 'additional_params' parameter in all versions up to, and including, 9.3.0 due to insufficient escaping on the user su…

The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to generic SQL Injection via the 'additional_params' parameter in all versions up to, and including, 9.3.0 due to insufficient escaping on the user su…

▾ Sunlitwebaways · NEX-Forms – Ultimate Forms Plugin for WordPressEPSS 0.51%via NVD