POSIMYTH Vulnerabilities and Affected Products
Vulnerabilities associated with Nexter Blocks.
Products
Clear product- Nexter Blocks8 vulnerabilities
- The Plus Addons for Elementor Page Builder Lite8 vulnerabilities
- the_plus_addons_for_elementor4 vulnerabilities
- Nexter2 vulnerabilities
- Nexter Extension2 vulnerabilities
- UiChemy2 vulnerabilities
- nexter_blocks1 vulnerability
- Sticky Header Effects for Elementor1 vulnerability
- the_plus_addons_for_elementor_pro1 vulnerability
- WDesignkit1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-39516MEDIUM | WordPress Nexter Blocks plugin <= 4.7.0 - Sensitive Data Exposure vulnerabilityExposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor allows Retrieve Embedded Sensitive Data.This issue affects Nexter Blocks: from n/a through <= 4.7.0. CWE-497Apr 8, 2026 | CVSS5.3v3.1 | EPSS0.24% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-50452MEDIUM | WordPress Nexter Blocks plugin <= 3.3.3 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor allows Stored XSS.This issue affects Nexter Blocks: from n/a through <= 3.3.3. CWE-79Feb 20, 2026 | CVSS6.5v3.1 | EPSS0.215% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-24377MEDIUM | WordPress Nexter Blocks plugin <= 4.6.3 - Sensitive Data Exposure vulnerabilityExposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor allows Retrieve Embedded Sensitive Data.This issue affects Nexter Blocks: from n/a through <= 4.6.3. CWE-497Jan 22, 2026 | CVSS4.3v3.1 | EPSS0.18% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-54739MEDIUM | WordPress Nexter Blocks Plugin <= 4.5.4 - Broken Access Control VulnerabilityMissing Authorization vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nexter Blocks: from n/a through <= 4.5.4. CWE-862Aug 14, 2025 | CVSS5.3v3.1 | EPSS0.238% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-56294MEDIUM | WordPress Nexter Blocks plugin <= 4.0.7 - Broken Access Control vulnerabilityMissing Authorization vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nexter Blocks: from n/a through <= 4.0.7. CWE-862Jan 7, 2025 | CVSS6.4v3.1 | EPSS0.374% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-56246MEDIUM | WordPress Nexter Blocks plugin <= 4.0.4 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor allows DOM-Based XSS.This issue affects Nexter Blocks: from n/a through <= 4.0.4. CWE-79Jan 2, 2025 | CVSS6.5v3.1 | EPSS0.258% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-33572MEDIUM | WordPress Nexter Blocks plugin <= 3.2.5 - Broken Access Control vulnerabilityMissing Authorization vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor.This issue affects Nexter Blocks: from n/a through <= 3.2.5. CWE-862Jun 9, 2024 | CVSS4.3v3.1 | EPSS0.43% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-30435HIGH | WordPress Nexter Blocks plugin <= 3.2.5 - Reflected Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor.This issue affects Nexter Blocks: from n/a through <= 3.2.5. CWE-79Mar 29, 2024 | CVSS7.1v3.1 | EPSS0.423% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |