Input validation vulnerability in NEX-Forms – Ultimate Form Builder – Contact forms and much more 8.7.13

A popular plugin for WordPress called NEX-Forms is at risk of being hacked by malicious individuals. This is because the plugin does not properly protect against SQL Injection, which is a way for hackers to access sensitive information from the database. This vulnerability affects all versions up to 8.7.13 and can be exploited by attackers without needing to log in. This can happen through a cross-site request forgery (CSRF) attack, as the plugin does not have proper security measures in place.