CVE-2021-34676

Basix NEX-Forms through 7.8.7 allows authentication bypass for Excel report generation.

• CWE-287

• http://basixonline.net/nex-forms-wordpress-form-builder-demo/change-log/Release Notes, Vendor Advisory
• https://github.com/rauschecker/CVEs/tree/main/CVE-2021-34676Exploit, Third Party Advisory
• http://basixonline.net/nex-forms-wordpress-form-builder-demo/change-log/Release Notes, Vendor Advisory
• https://github.com/rauschecker/CVEs/tree/main/CVE-2021-34676Exploit, Third Party Advisory

Published

Jul 19, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-34665The WP SEO Tags WordPress plugin is vulnerable to Reflected …6.1
• CVE-2021-34666The Add Sidebar WordPress plugin is vulnerable to Reflected …6.1
• CVE-2021-34667The Calendar_plugin WordPress plugin is vulnerable to Reflec…6.1
• CVE-2021-34668The WordPress Real Media Library WordPress plugin is vulnera…5.4
• CVE-2021-3467A NULL pointer dereference flaw was found in the way Jasper …5.5
• CVE-2021-34675Basix NEX-Forms through 7.8.7 allows authentication bypass f…7.5
• CVE-2021-34679Thycotic Password Reset Server before 5.3.0 allows credentia…7.5
• CVE-2021-3468A flaw was found in avahi in versions 0.6 up to 0.8. The eve…5.5
• CVE-2021-34682Receita Federal IRPF 2021 1.7 allows a man-in-the-middle att…3.7
• CVE-2021-34683An issue was discovered in EXCELLENT INFOTEK CORPORATION (EI…5.3
• CVE-2021-34684Hitachi Vantara Pentaho Business Analytics through 9.1 allow…9.8
• CVE-2021-34685UploadService in Hitachi Vantara Pentaho Business Analytics …7.2