NEX-Forms – Ultimate Forms Plugin for WordPress

Explore NEX-Forms – Ultimate Forms Plugin for WordPress vulnerabilities across all versions. Currently tracking 37 known vulnerabilities, including severity, impact, and patch status.

01234567891014.04.2014Today21.04.20159.8NEX-Forms – Ultimate Form Builder – Contact forms and much more < 3.4 - SQL Injection CVSS 9.8 · 21.04.201516.07.20159.8NEX-Forms – Ultimate Form Builder < 4.6.1 - SQL Injection CVSS 9.8 · 16.07.201527.11.20206.3NEX-Forms <= 7.7.1 - Missing Authorization on Various AJAX Actions CVSS 6.3 · 27.11.202019.07.20214.3NEX-Forms <= 7.8.7 Authorization Bypass CVSS 4.3 · 19.07.202114.11.20218.8NEX-Forms – Ultimate Form Builder <= 8.4.2 - Cross-Site Request Forgery to Cross-Site Scripting CVSS 8.8 · 14.11.202101.08.20227.2NEX-Forms <= 7.9.6 - Authenticated (Administrator+) SQL Injection CVSS 7.2 · 01.08.202228.02.20236.4NEX-Forms - Ultimate Form Builder <= 8.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVSS 6.4 · 28.02.202317.04.20237.2NEX-Forms <= 8.3.3 - Authenticated (Administrator+) SQL Injection CVSS 7.2 · 17.04.202326.06.20234.8NEX-Forms - Ultimate Form Builder <= 8.4.3 - Authenticated Stored Cross-Site Scripting via Form Name CVSS 4.8 · 26.06.202321.12.20235.5NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.5 - Authenticated (Admin+) SQL Injection CVSS 5.5 · 21.12.202328.12.20234.3NEX-Forms – Ultimate Form Builder <= 8.5.2 - Cross-Site Request Forgery CVSS 4.3 · 28.12.202331.01.20245.3NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via set_starred() CVSS 5.3 · 31.01.20245.3NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via set_read() CVSS 5.3 · 31.01.20245.3NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via restore_records() CVSS 5.3 · 31.01.202412.02.20246.4NEX-Forms – Ultimate Form Builder <= 8.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode CVSS 6.4 · 12.02.202405.07.20246.4NEX-Forms – Ultimate Form Builder <= 8.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 05.07.202430.09.20246.1NEX-Forms – Ultimate Form Builder <= 8.7.3 - Reflected Cross-Site Scripting CVSS 6.1 · 30.09.202402.12.20244.9NEX-Forms – Ultimate Form Builder <= 8.7.8 - Authenticated (Administrator+) SQL Injection CVSS 4.9 · 02.12.202424.12.20244.9NEX-Forms <= 8.7.15 - Authenticated (Admin+) SQL Injection CVSS 4.9 · 24.12.202411.03.20255.3NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.8.1 - Unauthenticated Sensitive Information Exposure CVSS 5.3 · 11.03.202507.05.20256.3NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.9.1 - Authenticated (Custom) Limited Code Execution via get_table_records Function CVSS 6.3 · 07.05.20256.4NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.9.1 - Authenticated (Custom) Stored Cross-Site Scripting CVSS 6.4 · 07.05.202520.08.20254.3NEX-Forms <= 9.1.3 - Cross-Site Request Forgery CVSS 4.3 · 20.08.202510.10.20254.9NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.1.6 - Authenticated (Admin+) SQL Injection CVSS 4.9 · 10.10.202519.12.20254.4Nex-Forms Express WP Form Builder <= 9.1.7 - Authenticated (Admin+) Stored Cross-Site Scripting CVSS 4.4 · 19.12.202530.01.20265.3NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.1.8 - Missing Authorization to Unauthenticated Sensitive Information Exposure CVSS 5.3 · 30.01.202604.02.20267.2NEX-Forms <= 9.1.7 - Unauthenticated Stored Cross-Site Scripting CVSS 7.2 · 04.02.202609.02.20266.1NEX-Forms <= 9.1.7 - Reflected Cross-Site Scripting CVSS 6.1 · 09.02.202613.03.20264.3NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.1.9 - Missing Authorization to Authenticated (Subscriber+) License Deactivation via deactivate_license CVSS 4.3 · 13.03.202614.03.20267.5NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.1.9 - Missing Authorization to Unauthenticated Arbitrary Form Entry Modification via nf_set_entry_update_id CVSS 7.5 · 14.03.202602.05.20267.2NEX-Forms <= 9.1.11 - Unauthenticated Stored Cross-Site Scripting via POST Parameter Key Names CVSS 7.2 · 02.05.202614.05.20264.9NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.1.12 - Authenticated (Administrator+) SQL Injection via 'table' Parameter CVSS 4.9 · 14.05.202626.06.20265.3NEX-Forms <= 9.2.2 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via CSVExport Class CVSS 5.3 · 26.06.202630.06.20267.2NEX-Forms <= 9.2.2 - Unauthenticated Stored Cross-Site Scripting via '_name[]' Array Parameter CVSS 7.2 · 30.06.202602.07.20267.2NEX-Forms <= 9.2.2 - Unauthenticated Stored Cross-Site Scripting via 'real_val__' Parameter CVSS 7.2 · 02.07.202610.07.20267.2NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.2.2 - Unauthenticated Stored Cross-Site Scripting CVSS 7.2 · 10.07.20265.3NEX-Forms <= 9.2.2 - Missing Authorization to Unauthenticated Arbitrary Form Entry Modification via nf_send_nf_email AJAX Action CVSS 5.3 · 10.07.2026

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

37

Get automatic notifications for all NEX-Forms – Ultimate Forms Plugin for WordPress vulnerabilities before they are exploited.

Vulnerability Records

37 records
2026-07-10 17:40CVE-2026-9017
5.3
Medium
Michael Iden (Mickhat)Yes
2026-07-10 00:00CVE-2026-57668
7.2
High
Nguyen Ba KhanhYes
2026-07-02 15:30CVE-2026-13040
7.2
High
Taichi KashimuraYes
2026-06-30 21:14CVE-2026-12142
7.2
High
Anthony Cihan (Hann1bl3L3ct3r)Yes
2026-06-26 17:24CVE-2026-12404
5.3
Medium
valent1Yes
2026-05-14 18:51CVE-2026-7046
4.9
Medium
Athul JayaramYes
2026-05-02 15:41CVE-2026-5063
7.2
High
Naoya Takahashi (nakko)Yes
2026-03-14 13:14CVE-2026-1947
7.5
High
Youssef ElouaerYes
2026-03-13 15:17CVE-2026-1948
4.3
Medium
Legion HunterYes
2026-02-09 00:00CVE-2025-69326
6.1
Medium
SkalucyYes
Showing 1–10 of 37 reports
NEX-Forms &#8211; Ultimate Forms Plugin for WordPress banner
Latestv9.2.3

NEX-Forms &#8211; Ultimate Forms Plugin for WordPress

Basix

Author

Basix

4.1(133)
82/100
Last Updated
2026-06-24 (1mo ago)
Active Installs
6,000+
Downloads
531,110
Requires WP
4.0+
Requires PHP
0+
Tested up to
WP 7.0.2
Created
2014-04-14 (13y ago)

NEX-Forms is the ultimate WordPress form builder plugin for creating interactive, multi-functional, and beautiful responsive forms. Whether you need contact forms, survey forms, booking forms, or even payment-integrated forms, NEX-Forms lets you build them quickly with a powerful drag & drop form builder – no coding required! ✅ Highlights: Contact Forms, Booking Forms, Surveys, Quizzes, Polls Drag-and-drop Form Builder – Easy to Use! Multi-Step Forms & Interactive Logic Popups, Sticky Forms & On-Click Display Conditional Logic for Smart Workflows File Uploads, Autoresponders & Admin Notifications Built-In Anti-spam Control, Email Setup, and Confirmation Messages Fully Responsive – Works on all devices Supports PayPal Payments Integration ✨Live Demo | 🚀Go Pro | ✨Docs | ✨Get all add-ons FREE ✅ Create any type of form you can imagine and embed it anywhere on your site with ease -> Popup Forms, Interactive Forms, Multi-Step Forms, Sticky Forms, Contact Forms, Survey Forms, Payment Forms, Booking Forms, Quiz Forms and more. Trusted by thousands of websites and built to deliver flexibility, performance, and stunning design. 🎯 Perfect for: – Contact & Support Forms – Surveys & Feedback Forms – Event Booking & Appointment Forms – Order & Payment Forms (with PayPal) – Newsletter Signups – Quizzes & Exams – File Upload Forms – Popup Forms and Sticky Forms – Conditional Logic Forms 💡 Why Choose NEX-Forms? NEX-Forms offers one of the most comprehensive and feature-rich experiences available for form creation in WordPress. Its visual builder, real-time previews, advanced options, and flexible display settings make it ideal for both beginners and developers. You can display forms in: – Standard page/post content – Modal popups – Sliding forms – Sticky side tabs – On-click or automatic timed displays Build any type of form Interactive Forms Personalise your forms using live form input by your users. In essence this gives your forms a real-time conversational feel. See Interactive Forms Examples Contact Forms Create beautiful Contact Forms in minutes! See Contact Forms Examples Cost Estimation Forms and Calculation Forms Use math logic to do simple to complex calculations in your forms on the fly. See Cost Estimation Forms and Calculation Forms Examples Conversational Forms Conversational forms eliminates the overwhelming nature of a form by focusing your user on single question at a time See Conversational Forms Examples Payment Forms or PayPal Forms Receive payments via PayPal directly from your forms built with NEX-Forms. See Payment Form or PayPal Forms Examples Quiz Forms or Questionnaire Forms Create online quizes and questionnaires using multi-step forms. Generate different user messages and outcomes based on scores. See Online Quiz Forms Examples Booking forms and Order Forms Create online booking forms with smart date and time picker form fields. See Booking form and Order Forms Examples Subscription Forms Integrate your form with Email subscriptions including MailChimp, MailPoet, Mailster, GetResponse See Subscription Forms Examples Application Forms Create application forms and recieve relevant documents from file uploader fields. See Application Forms Examples Quick Forms or Quick Question Forms Collect large amounts of data quickly with single selection form submissions. Data collection made easy. See Quick Forms Examples Survey Forms Know your users! Build beautiful customer survey forms with tons and tons of options. See Survey Forms Examples Contract Forms or Contractual Forms Create formal contract forms with digital signatures and PDF’s. Use signatures to sign contractual PDF’s and email the binding documents to you and your users. See Contract Forms Examples Sticky Forms Add any form to your site’s top, right, bottom and/or left borders. Slides open with customisable paddles. See Sticky Forms Examples Popup Forms Automatically popup any form on a specified time delay. See Auto Popup Form Example Popup forms from bootstrap or material design styled buttons, your theme’s built-in buttons, your own custom buttons or any element(s) or your page.See Popup Form from buttons Example Popup forms from any links within your page. See Popup Form from link Example Automatically popup any form when a users scrolls to a specified dept on your page. See Auto Scroll Popup Form Example Automatically popup any form when a user tries to leave your page. See Exit Intent Popup Form Example ✨Live Demo | 🚀Go Pro | ✨Docs | ✨Get all add-ons FREE Features include: ✅ RESPONSIVE DEVELOPMENT Built using the latest web technologies like html5, css3, and jQuery, rest assured NEX-Forms will look smashing on every device. ✅ 30+ FORM ELEMENTS Make use of 30+ Bootstrap styled fields with pixel perfect precision! More for less! ✅ MODERN DESIGN Designed with modern trends and techniques in mind, NEX-Forms will help you connect with your customers in a whole new and exciting way. ✅ DRAG & DROP Add and sort form elements with simple drag and drop. If you can play solitaire you can build stunning web forms without a single line of code! ✅ FULL GRID SYSTEM Create any form layout with one of a kind draggable grid system! Includes unlimited grid nesting! ✅ MULTI-STEP FORMS Break your forms down into manageable steps. Includes the ability to create online questionaries! ✅ MATH LOGIC Perform simple and complex math equations from user selections and input. ✅ CONDITIONAL LOGIC Turn complex and cluttered forms into interactive user friendly forms by showing and hiding fields based on the user’s selections and input. ✅ FORM ANIMATIONS Catch your users eye with 70+ super smooth animations. ✅ TONS OF ICONS Make use of 2000+ icons that can be added to form fields. Font Awesome icons are vectors, which mean they’re gorgeous on high-resolution displays. ✅ INTEGRATED WITH GOOGLE FONTS Allows you to easily add fonts from the Google Font Directory to use in your forms. Over 1200 fonts are made available in NEX-Forms. ✅ ANTI-SPAM CONTROL With NEX-forms built-in Anti-spam you will never receive an unwanted email. No captchas needed to prove your users are in fact human! ✅ EMAIL AUTORESPONDER Receive all your form data in fully customisable emails. Send admin emails to multiple recipients and/or send confirmation emails to end users! ✅ SUBMISSIONS STORAGE AND EXPORT All form submissions are stored in your database and can be viewed from the admin panel. Entries can also be exported to Excel! ✅ FORM EXPORT Export form with a single click. Includes all form settings and can be imported into any NEX-forms installation. ✅ SURVEY FIELDS Create beautiful surveys with thumb rating, star rating and smiley rating fields! ✅ PRE POPULATE FIELDS Set default field values! Auto-fill fields from other forms! Auto-fill fields from URL parameters! ✅ POPUP AND STICKY FORMS Use a NEX-Forms button or link or trigger the popup form using an existing element on the page. Add sticky-paddle/slide-in froms to any side of your site! ✅ SAME PAGE FORMS You can have as many forms on a single page as you need without any conflict! ✅ AJAX POWERED Submit forms without page refreshing! ✅ SIDEBAR WIDGET Add forms into your sidebars with WordPress Widgets. ✅ FILE UPLOADER FIELDS Receive files as email attachments. Can also be viewed and downloaded from the backend. Includes file type validation and live image preview. ✅ HIDDEN FIELDS Add dynamic and/or static hidden fields to your forms for extra admin info from form submissions. ✅ THUMB SELECTION FIELDS Showcase your products in single and multi-selection fields. ✅ STYLING TOOLBAR Style your forms with ease using our one of a kind styling toolbar similar to popular tools such as Photoshop, Fireworks, MS Paint, etc. ✅ PERSONAL PREFERENCES Save time by setting up personal preferences to be used as defaults for all new forms! ✅ FORM VALIDATION Make fields required and your validate fields as: Any Format, Email, Phone Number, URL, Numbers Only or Text only. ✅ MAX/MIN CHARACTER LIMITING Limit characters in multi-line text areas and single-line text fields by setting maximum/minimum characters allowed. Includes total character count indicator. ✅ KEYBOARD SHORTCUTS Save time using built-in keyboard shortcuts. For example, save a form by hitting CTRL+ALT+S. ✅ LIVE FORM PREVIEWER Preview your form in real-time, at anytime, while you are busy building it! ✅ DUPLICATE FORMS Duplicate existing forms with a single click! Duplicated forms include all the original form’s settings! ✅ FORM TEMPLATES Create your very own custom form templates to be re-used time and time again! ✅ UNLIMITED FORMS There is no limit to how many forms you can have on your website ✅ PERSONALIZED ADMIN PANEL Create and save your very own personalized NEX-Forms admin panel layouts! ✅ TONS OF FIELD SETTINGS Customize your form fields with a huge variety of easy to use settings! ✅ FIELD DUPLICATION Copy fields, grids, panels and any form element so that you don’t have to do any double work! ✅ EMBED OPTIONS Embed/Use forms in post, pages, sidebars and/or theme template files! Use NEX-Forms page/post editor button to generate shortcodes. ✅ REDIRECT AFTER SUBMISSION You can redirect your users to a specified URL after a form is submitted. For example to your own custom “Thank you” page, etc. ✅ SEND DATA TO CUSTOM URL Send submitted form data to a custom URL by using GET or POST method. Perfect for sending data to an alternative database! ✅ AJAX POWERED ADMIN PANEL NEX-Forms admin panel will give you a real desktop application feel with no page refreshing. Everything is done and found in a single versatile admin tool! ✅ WP COLOR SCHEME ADAPT NEX-Forms admin panel will adapt to the colours of your selected WordPress colour scheme! ✅ GLOBAL CONFIGURATION For example, you can disable the NEX-Forms widget so it does no show up on your WP widgets page… ✅ MULTIPLE EMAIL METHODS Choose your own mailing delivery methods from secure SMTP to normal WordPress Mail! ✅ ZERO CONFLICT ADMIN PANEL 3rd Party plugins and themes that include javascript and stylesheets will not affect the NEX-Forms admin panel! NEX-Forms will not affect any other plugin or theme. 30+ form elements that includes amazing field types Text, Textarea, Select, Multi-Select, Radio buttons, Check boxes, Star rating, Sliders, Spinners, Tags input, Autocomplete, Colour pallet, Datetime, Date, Time, File uploader, Image uploader, headings, paragraphs, dividers, Panels and more… Conditional logic for form fields Show and hide fields plus form elements based on user selection and/or input: Create custom form fields Create custom form fields with over 2000+ icons and can be validated as url, email, phone number, text only or digits only. Autoresponder Receive form submission in your inbox and send confirmation mails to end users! Simple drag and drop or single click Building forms is easier then playing solitaire 😉 Ajax forms Validate and submit forms without page refreshing. Over 2000 icons to use in form fields! That’s right, use over 660 retina ready Font Awesome icons in radios, checks, sliders, spinners, custom form fields and more… Over 1500 fonts to be used Use over 1500 google fonts to make you forms look even more impressive! Grid layout system Use a draggable grid system to create just about any form layout you can think of. Includes unlimited nesting! Form entry storage and export All form submissions are stored in your WP (WordPress) database and can be exported. Anti-spam control NEX-Forms contain anti-spam protection. No programming needed to create awesome forms You don’t need to know any kind of programming. Build and style forms by simply clicking. Fully Responsive form While creating forms you are able to preview your forms on all the different devices and see exactly how they will behave on small and large screens with the live form previewer A few testimonials This is with out a doubt the best form builder I have ever used. You can literally build an awesome looking form in a few seconds. – Eugene1984 This simply must be the very best form builder available for WordPress – pbcunningham Great job and great responses to my questions. – BradDaca I have tried multiple plugins over the last 2 years, but this has the most unique design, feel and you can drag & drop fields and edit them in the easiest way of them all! 😀 – LChief Fantastic support and advice from the Basix crew! Comprehensive documentation and an easy implementation, a joy to work with +++ – graffig Benefiting from the input field icons and visual editor. Basix has provided EXCELLENT support to ensure the product was compatible with the installed WordPress theme – thank you! – michelbayard Best excellent support and best plugin form exist – fortunatod NEX-Forms is a really great plugin which i have been longing for long time! – ympark2000 Great usability, Design and Support! – HITMILK I have tried many many form builders and was so happy I stumbled on this one – themisters Great support in a few minutes!! 🙂 – Grafitec1 Not only is form creator the best I have ever used but also the support is excellent. 5 Stars for both. Keep up the great work. – Mirakan A very good plugin if you want to easily and quickly create beautiful forms! – chriskon Thank you for this plugin and the support! It looks and works awesome! Thank you very much! – henriett NEX-Forms is without doubt the best Form Builder Plugin for WordPress. – quatroweb ✨Live Demo | 🚀Go Pro | ✨Docs | ✨Get all add-ons FREE View more testimonials

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C