https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T19:33:03.758549+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-265267 EUVD-2026-265267 2026-10-15T19:33:03.760698+00:00 EUVD-2026-265267 https://cve.radiocsirt.org/vuln/fkie_cve-2025-14803 fkie_cve-2025-14803 2026-10-15T19:33:03.760728+00:00

The NEX-Forms WordPress plugin before 9.1.8 does not sanitise and escape some of its settings. The NEX-Forms WordPress plugin before 9.1.8 can be configured in such a way that could allow subscribers to perform Stored Cross-Site Scripting.

 https://cve.radiocsirt.org/vuln/ghsa-cp58-32qm-mgjw GHSA-cp58-32qm-mgjw 2026-10-15T19:33:03.760758+00:00

The NEX-Forms WordPress plugin before 9.1.8 does not sanitise and escape some of its settings. The NEX-Forms WordPress plugin before 9.1.8 can be configured in such a way that could allow subscribers to perform Stored Cross-Site Scripting.