CVE-2025-14803 | NEX-Forms Plugin up to 9.1.7 on WordPress Setting cross site scripting

January 9, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in NEX-Forms Plugin up to 9.1.7 on WordPress. This affects an unknown part of the component Setting Handler. This manipulation causes cross site scripting.

This vulnerability appears as CVE-2025-14803. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More