A vulnerability identified as problematic has been detected in NEX-Forms Plugin up to 9.1.8 on WordPress. This affects the function NF5_Export_Forms. The manipulation of the argument nex_forms_Id leads to information disclosure.

This vulnerability is traded as CVE-2025-15510. It is possible to initiate the attack remotely. There is no exploit available.