NEX-Forms – Ultimate Form Builder – Contact forms and much more, CVE-2015-9452
- CVE, Research URL
- Home page URL
-
Security reports for NEX-Forms – Ultimate Form Builder – Contact forms and much more
- Published on
- Oct 07, 2019
- Research Description
- The nex-forms-express-wp-form-builder plugin before 4.6.1 for WordPress has SQL injection via the wp-admin/admin.php?page=nex-forms-main nex_forms_Id parameter.
- Affected versions
-
Min -, max 4.6.1.
- Status
-
vulnerable