https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 17:22:58 +0000 https://db.gcve.eu/vuln/cve-2026-106166 <p><strong>Affected:</strong> Unknown NEX-Forms</p> <p>The NEX-Forms WordPress plugin before 9.3.1 does not perform any authorization, ownership or request-validation checks before updating stored form entries, allowing unauthenticated attackers to overwrite, permanently erase, reassign or append to any previously submitted form entry by referencing its sequential identifier.</p> <p><strong>Affected:</strong> Unknown NEX-Forms</p> <p>The NEX-Forms WordPress plugin before 9.3.1 does not perform any authorization, ownership or request-validation checks before updating stored form entries, allowing unauthenticated attackers to overwrite, permanently erase, reassign or append to any previously submitted form entry by referencing its sequential identifier.</p> https://db.gcve.eu/vuln/cve-2026-106166