Basix vulnerabilities

We track 9 vulnerabilities in Basix products across 3 products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on October 9, 2026.

9vulnerabilities

0critical

9high

0exploited

7.5average CVSS score

Latest Basix vulnerabilities

7.1 High severity
NEX-Forms: Improper Neutralization of Input During Web Page Generation
CVE-2026-96607Oct 9, 2026Basix
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NEX-Forms nex-forms-express-wp-form-builder allows Reflected XSS.This issue affects NEX-Forms: from n/a through 9.3.1.
7.1 High severity
NEX-Forms: Improper Neutralization of Input During Web Page Generation
CVE-2026-57668Jul 13, 2026Basix
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NEX-Forms nex-forms-express-wp-form-builder allows Stored XSS.This issue affects NEX-Forms: from n/a through <= 9.2.2.
7.1 High severity
NEX-Forms: Improper Neutralization of Input During Web Page Generation
CVE-2025-69326Feb 20, 2026Basix
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NEX-Forms nex-forms-express-wp-form-builder allows Reflected XSS.This issue affects NEX-Forms: from n/a through <= 9.1.7.
7.1 High severity
NEX-Forms: Improper Neutralization of Input During Web Page Generation
CVE-2025-69324Feb 20, 2026Basix
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NEX-Forms nex-forms-express-wp-form-builder allows Stored XSS.This issue affects NEX-Forms: from n/a through <= 9.1.7.
7.1 High severity
NEX-Forms LITE: Improper Neutralization of Input During Web Page Generation
CVE-2025-58966Oct 22, 2025Basix
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NEX-Forms LITE nex-forms-lite allows Reflected XSS.This issue affects NEX-Forms LITE: from n/a through < 8.2.
8.8 High severity
NEX-Forms: Cross-Site Request Forgery
CVE-2025-49399Aug 20, 2025Basix
Cross-Site Request Forgery (CSRF) vulnerability in Basix NEX-Forms nex-forms-express-wp-form-builder allows Cross Site Request Forgery.This issue affects NEX-Forms: from n/a through <= 9.1.3.
7.2 High severity
NEX-Forms: Improper Neutralization of Special Elements used in an SQL Command
CVE-2024-53808Dec 6, 2024Basix
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Basix NEX-Forms nex-forms-express-wp-form-builder allows SQL Injection.This issue affects NEX-Forms: from n/a through <= 8.7.8.
8.8 High severity
NEX-Forms – Ultimate Form Builder – Contact…: Cross-Site Request Forgery
CVE-2023-52120Jan 5, 2024Basix
Cross-Site Request Forgery (CSRF) vulnerability in Basix NEX-Forms – Ultimate Form Builder – Contact forms and much more.This issue affects NEX-Forms – Ultimate Form Builder – Contact forms and much more: from n/a through 8.5.2.
7.2 High severity
NEX-Forms – Ultimate Form Builder – Contact…: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-50838Dec 28, 2023Basix
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Basix NEX-Forms – Ultimate Form Builder – Contact forms and much more.This issue affects NEX-Forms – Ultimate Form Builder – Contact forms and much more: from