basixonline kayıtları
basixonline üreticisine ait 21 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %28,6
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')6
- CWE-862 Missing Authorization4
- CWE-287 Improper Authentication2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
21 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2023-2114Kavram kanıtı | NEX-Forms < 8.4 - Admin+ SQL Injectionbasixonline · nex-forms · CWE-89 | Yüksek7,2 | — | %44,6 | 8 May 2023 |
40Planlayın | CVE-2015-9452İstismar yok | The nex-forms-express-wp-form-builder plugin before 4.6.1 for WordPress has SQL injection via the wp-admin/admin.php?page=nex-forms-main nexbasixonline · nex-forms · CWE-89 | Kritik9,8 | — | %2,3 | 7 Eki 2019 |
39İzleyin | CVE-2022-3142Kavram kanıtı | NEX-Forms < 7.9.7 - Authenticated SQLibasixonline · nex-forms · CWE-89 | Yüksek8,8 | — | %14,6 | 19 Eyl 2022 |
35İzleyin | CVE-2023-52120İstismar yok | WordPress NEX-Forms – Ultimate Form Builder Plugin <= 8.5.2 is vulnerable to Cross Site Request Forgery (CSRF)basixonline · nex-forms · CWE-352 | Yüksek8,8 | — | %0,2 | 5 Oca 2024 |
31İzleyin | CVE-2021-34675İstismar yok | Basix NEX-Forms through 7.8.7 allows authentication bypass for stored PDF reports.basixonline · nex-forms · CWE-287 | Yüksek7,5 | — | %1,8 | 19 Tem 2021 |
31İzleyin | CVE-2021-34676İstismar yok | Basix NEX-Forms through 7.8.7 allows authentication bypass for Excel report generation.basixonline · nex-forms · CWE-287 | Yüksek7,5 | — | %1,8 | 19 Tem 2021 |
28İzleyin | CVE-2024-53808İstismar yok | WordPress NEX-Forms plugin <= 8.7.8 - SQL Injection vulnerabilitybasixonline · nex-forms · CWE-89 | Yüksek7,2 | — | %0,6 | 6 Ara 2024 |
28İzleyin | CVE-2023-50838İstismar yok | WordPress NEX-Forms – Ultimate Form Builder Plugin <= 8.5.5 is vulnerable to SQL Injectionbasixonline · nex-forms · CWE-89 | Yüksek7,2 | — | %0,5 | 28 Ara 2023 |
25İzleyin | CVE-2020-36670İstismar yok | NEX-Forms <= 7.7.1 - Missing Authorization on Various AJAX Actionsbasixonline · nex-forms · CWE-862 | Orta6,3 | — | %0,5 | 7 Mar 2023 |
25İzleyin | CVE-2025-4208İstismar yok | NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.9.1 - Authenticated (Custom) Limited Code Execution via get_table_records Functionbasixonline · nex-forms · CWE-94 | Orta6,3 | — | %0,3 | 8 May 2025 |
24İzleyin | CVE-2024-47389İstismar yok | WordPress NEX-Forms plugin <= 8.7.3 - Reflected Cross Site Scripting (XSS) vulnerabilitybasixonline · nex-forms · CWE-79 | Orta6,1 | — | %0,3 | 5 Eki 2024 |
21İzleyin | CVE-2023-0272İstismar yok | NEX-Forms < 8.3.3 - Contributor+ Stored XSSbasixonline · nex-forms · CWE-79 | Orta5,4 | — | %0,5 | 27 Mar 2023 |
21İzleyin | CVE-2023-0439İstismar yok | NEX-Forms < 8.4.4 - Authenticated Stored XSSbasixonline · nex-forms · CWE-79 | Orta5,4 | — | %0,3 | 17 Tem 2023 |
21İzleyin | CVE-2024-25593İstismar yok | WordPress NEX-Forms plugin <= 8.5.5 - Cross Site Scripting (XSS) vulnerabilitybasixonline · nex-forms · CWE-79 | Orta5,4 | — | %0,3 | 15 Mar 2024 |
21İzleyin | CVE-2024-37512İstismar yok | WordPress NEX-Forms – Ultimate Form Builder plugin <= 8.5.10 - Cross Site Scripting (XSS) vulnerabilitybasixonline · nex-forms · CWE-79 | Orta5,4 | — | %0,3 | 21 Tem 2024 |
21İzleyin | CVE-2025-3468İstismar yok | NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.9.1 - Authenticated (Custom) Stored Cross-Site Scriptingbasixonline · nex-forms · CWE-79 | Orta5,4 | — | %0,2 | 8 May 2025 |
19İzleyin | CVE-2024-10862İstismar yok | NEX-Forms <= 8.7.15 - Authenticated (Admin+) SQL Injectionbasixonline · nex-forms · CWE-89 | Orta4,9 | — | %0,5 | 25 Ara 2024 |
19İzleyin | CVE-2021-24705İstismar yok | NEX-Forms < 8.4.3 - Stored Cross-Site Scripting via CSRFbasixonline · nex-forms · CWE-79 | Orta4,8 | — | %0,3 | 13 Ara 2021 |
17İzleyin | CVE-2024-1129İstismar yok | NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via set_starred()basixonline · nex-forms · CWE-862 | Orta4,3 | — | %0,5 | 28 Şub 2024 |
17İzleyin | CVE-2024-1130İstismar yok | NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via set_read()basixonline · nex-forms · CWE-862 | Orta4,3 | — | %0,5 | 28 Şub 2024 |
17İzleyin | CVE-2024-0907İstismar yok | NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via restore_records()basixonline · nex-forms · CWE-862 | Orta4,3 | — | %0,5 | 28 Şub 2024 |
- CVE-2023-211441Planlayın
NEX-Forms < 8.4 - Admin+ SQL Injection
YüksekCVSS 7,2Kavram kanıtıEPSS %44basixonline · nex-forms8 May 2023
- CVE-2015-945240Planlayın
The nex-forms-express-wp-form-builder plugin before 4.6.1 for WordPress has SQL injection via the wp-admin/admin.php?page=nex-forms-main nex
KritikCVSS 9,8İstismar yokEPSS %2basixonline · nex-forms7 Eki 2019
- CVE-2022-314239İzleyin
NEX-Forms < 7.9.7 - Authenticated SQLi
YüksekCVSS 8,8Kavram kanıtıEPSS %14basixonline · nex-forms19 Eyl 2022
- CVE-2023-5212035İzleyin
WordPress NEX-Forms – Ultimate Form Builder Plugin <= 8.5.2 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0basixonline · nex-forms5 Oca 2024
- CVE-2021-3467531İzleyin
Basix NEX-Forms through 7.8.7 allows authentication bypass for stored PDF reports.
YüksekCVSS 7,5İstismar yokEPSS %1basixonline · nex-forms19 Tem 2021
- CVE-2021-3467631İzleyin
Basix NEX-Forms through 7.8.7 allows authentication bypass for Excel report generation.
YüksekCVSS 7,5İstismar yokEPSS %1basixonline · nex-forms19 Tem 2021
- CVE-2024-5380828İzleyin
WordPress NEX-Forms plugin <= 8.7.8 - SQL Injection vulnerability
YüksekCVSS 7,2İstismar yokEPSS %0basixonline · nex-forms6 Ara 2024
- CVE-2023-5083828İzleyin
WordPress NEX-Forms – Ultimate Form Builder Plugin <= 8.5.5 is vulnerable to SQL Injection
YüksekCVSS 7,2İstismar yokEPSS %0basixonline · nex-forms28 Ara 2023
- CVE-2020-3667025İzleyin
NEX-Forms <= 7.7.1 - Missing Authorization on Various AJAX Actions
OrtaCVSS 6,3İstismar yokEPSS %0basixonline · nex-forms7 Mar 2023
- CVE-2025-420825İzleyin
NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.9.1 - Authenticated (Custom) Limited Code Execution via get_table_records Function
OrtaCVSS 6,3İstismar yokEPSS %0basixonline · nex-forms8 May 2025
- CVE-2024-4738924İzleyin
WordPress NEX-Forms plugin <= 8.7.3 - Reflected Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0basixonline · nex-forms5 Eki 2024
- CVE-2023-027221İzleyin
NEX-Forms < 8.3.3 - Contributor+ Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %0basixonline · nex-forms27 Mar 2023
- CVE-2023-043921İzleyin
NEX-Forms < 8.4.4 - Authenticated Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %0basixonline · nex-forms17 Tem 2023
- CVE-2024-2559321İzleyin
WordPress NEX-Forms plugin <= 8.5.5 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0basixonline · nex-forms15 Mar 2024
- CVE-2024-3751221İzleyin
WordPress NEX-Forms – Ultimate Form Builder plugin <= 8.5.10 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0basixonline · nex-forms21 Tem 2024
- CVE-2025-346821İzleyin
NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.9.1 - Authenticated (Custom) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0basixonline · nex-forms8 May 2025
- CVE-2024-1086219İzleyin
NEX-Forms <= 8.7.15 - Authenticated (Admin+) SQL Injection
OrtaCVSS 4,9İstismar yokEPSS %0basixonline · nex-forms25 Ara 2024
- CVE-2021-2470519İzleyin
NEX-Forms < 8.4.3 - Stored Cross-Site Scripting via CSRF
OrtaCVSS 4,8İstismar yokEPSS %0basixonline · nex-forms13 Ara 2021
- CVE-2024-112917İzleyin
NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via set_starred()
OrtaCVSS 4,3İstismar yokEPSS %0basixonline · nex-forms28 Şub 2024
- CVE-2024-113017İzleyin
NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via set_read()
OrtaCVSS 4,3İstismar yokEPSS %0basixonline · nex-forms28 Şub 2024
- CVE-2024-090717İzleyin
NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via restore_records()
OrtaCVSS 4,3İstismar yokEPSS %0basixonline · nex-forms28 Şub 2024