← WordPress Vulnerabilities
WordPress security by component

NEX-Forms – Ultimate Form Builder – Contact forms and much more

NEX-Forms – Ultimate Form Builder – Contact forms and much more is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Mar 12, 2025; the highest CVE/CNA score is 5.3.

Plugin slug: nex-forms-ultimate-form-builder-contact-forms-and-much-more

CVE-2024-13498: NEX-Forms – Ultimate Form Builder – Contact forms and much more: Sensitive information exposure

NEX-Forms – Ultimate Form Builder – Contact forms and much more is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller.

PublishedMar 12, 2025
Safe version guidanceSee mitigation notes
Safe version
Mar 12, 2025 CVE-2024-13498
NEX-Forms – Ultimate Form Builder – Contact forms and much more: Sensitive information exposure
NEX-Forms – Ultimate Form Builder – Contact forms and much more is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller.
See mitigation notes
CVE5.3
NVDPending