453 matches found
EUVD-2025-33815
The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in the action nfloadformentries in all versions up to, and including, 9.1.6 due to insufficient escaping on the user supplied parameter and lack of sufficient...
CVE-2025-10185
The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in the action nfloadformentries in all versions up to, and including, 9.1.6 due to insufficient escaping on the user supplied parameter and lack of sufficient...
CVE-2025-10185
CVE-2025-10185 affects NEX-Forms – Ultimate Forms Plugin for WordPress, where an SQL Injection is possible via the orderby parameter in the nf_load_form_entries action. Affected versions are up to 9.1.6. Exploitation requires Administrator+ privileges, but could be exposed to lower-privilege user...
CVE-2025-10185 NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.1.6 - Authenticated (Admin+) SQL Injection
The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in the action nfloadformentries in all versions up to, and including, 9.1.6 due to insufficient escaping on the user supplied parameter and lack of sufficient...
CVE-2025-10185 NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.1.6 - Authenticated (Admin+) SQL Injection
The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in the action nfloadformentries in all versions up to, and including, 9.1.6 due to insufficient escaping on the user supplied parameter and lack of sufficient...
WordPress plugin NEX-Forms – Ultimate Forms Plugin for WordPress SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blogging sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A SQL...
PT-2025-41642
Name of the Vulnerable Software and Affected Versions NEX-Forms – Ultimate Forms Plugin for WordPress versions through 9.1.6 Description The software is susceptible to SQL Injection through the orderby parameter within the nf load form entries action. Insufficient input sanitization and inadequat...
WordPress NEX-Forms – Ultimate Forms Plugin for WordPress plugin <= 9.1.6 - Authenticated (Admin+) SQL Injection vulnerability
Authenticated Admin+ SQL Injection vulnerability discovered by dutafi in WordPress Plugin NEX-Forms versions = 9.1.6...
EUVD-2015-9292
Malware in sbrugna...
EUVD-2021-21326
Malware in sbrugna...
EUVD-2021-11617
Malware in sbrugna...
EUVD-2020-24112
Malware in sbrugna...
EUVD-2014-7028
Malware in sbrugna...
EUVD-2021-21325
Malware in sbrugna...
EUVD-2024-36721
Malicious code in bioql PyPI...
EUVD-2025-25687
Malicious code in bioql PyPI...
EUVD-2025-25688
Malicious code in bioql PyPI...
EUVD-2024-22921
Malicious code in bioql PyPI...