{"id":3580,"date":"2025-05-08T07:34:22","date_gmt":"2025-05-08T07:34:22","guid":{"rendered":"http:\/\/localhost\/?p=3580"},"modified":"2025-05-08T07:34:22","modified_gmt":"2025-05-08T07:34:22","slug":"cve-2025-4208-nex-forms-ultimate-form-builder-contact-forms-and-much-more-891-authenticated-custom-l","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=3580","title":{"rendered":"CVE-2025-4208 NEX-Forms \u2013 Ultimate Form Builder \u2013 Contact forms and much more <= 8.9.1 - Authenticated (Custom) Limited Code Execution via get_table_records Function"},"content":{"rendered":"
\n

Vulnerability Details<\/h2>\n
\n

Basic Information<\/h3>\n\n\n\n\n\n\n
Title<\/th>\nCVE-2025-4208 NEX-Forms \u2013 Ultimate Form Builder \u2013 Contact forms and much more <= 8.9.1 - Authenticated (Custom) Limited Code Execution via get_table_records Function<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-05-08T11:13:44<\/td>\n<\/tr>\n
Last Seen<\/th>\n2025-05-08T11:51:17<\/td>\n<\/tr>\n
CVSS Score<\/th>\n6.3 (MEDIUM)<\/td>\n<\/tr>\n<\/table><\/div>\n
\n

CVSS v3 Details<\/h3>\n\n\n\n\n\n\n\n\n\n
Attack Vector<\/th>\nNETWORK<\/td>\n<\/tr>\n
Attack Complexity<\/th>\nLOW<\/td>\n<\/tr>\n
Privileges Required<\/th>\nLOW<\/td>\n<\/tr>\n
User Interaction<\/th>\nNONE<\/td>\n<\/tr>\n
Scope<\/th>\nUNCHANGED<\/td>\n<\/tr>\n
Confidentiality Impact<\/th>\nLOW<\/td>\n<\/tr>\n
Integrity Impact<\/th>\nLOW<\/td>\n<\/tr>\n
Availability Impact<\/th>\nLOW<\/td>\n<\/tr>\n<\/table><\/div>\n
\n

CVE Information<\/h3>\n\n\n\n\n
CVE IDs<\/th>\nCVE-2025-4208<\/td>\n<\/tr>\n
CWE<\/th>\nCWE-94<\/td>\n<\/tr>\n
Bulletin Family<\/th>\ncve<\/td>\n<\/tr>\n<\/table><\/div>\n
\n

Description<\/h3>\n
\n The NEX-Forms \u2013 Ultimate Form Builder \u2013 Contact forms and much more plugin for WordPress is vulnerable to Limited Code Execution in all versions up to, and including, 8.9.1 via the get_table_records function. This…\n <\/div>\n<\/p><\/div>\n
\n

Impact Assessment<\/h3>\n\n\n\n
Base Score<\/th>\n6.3<\/td>\n<\/tr>\n
Severity<\/th>\nMEDIUM<\/td>\n<\/tr>\n<\/table><\/div>\n
\n

View full CVE details<\/a><\/p>\n<\/p><\/div>\n<\/div>\n