NEX-Forms WordPress Plugin Missing Authorization Vulnerability Allowing Unauthenticated Data Export

A vulnerability exists in the NEX-Forms – Ultimate Forms Plugin for WordPress, in all versions through 9.1.8. The issue arises from a missing capability check in the NF5_Export_Forms class constructor, allowing unauthenticated attackers to export form configurations. This exported data may contain sensitive information such as email addresses, PayPal API credentials, and third-party integration keys. The vulnerability can be exploited by enumerating the nex_forms_Id parameter.

Impact

Exploitation of this vulnerability could lead to unauthorized access and export of sensitive information from the WordPress site, including personal data and API credentials.

Remediation

Users are advised to update the NEX-Forms – Ultimate Forms Plugin for WordPress to version 9.1.9 or a newer patched version.