POSIMYTH Vulnerabilities and Affected Products
Vulnerabilities associated with UiChemy.
Products
Clear product- Nexter Blocks8 vulnerabilities
- The Plus Addons for Elementor Page Builder Lite8 vulnerabilities
- the_plus_addons_for_elementor4 vulnerabilities
- Nexter2 vulnerabilities
- Nexter Extension2 vulnerabilities
- UiChemy2 vulnerabilities
- nexter_blocks1 vulnerability
- Sticky Header Effects for Elementor1 vulnerability
- the_plus_addons_for_elementor_pro1 vulnerability
- WDesignkit1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-69362MEDIUM | WordPress UiChemy plugin <= 4.4.2 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH UiChemy uichemy allows Stored XSS.This issue affects UiChemy: from n/a through <= 4.4.2. CWE-79Jan 6, 2026 | CVSS5.9v3.1 | EPSS0.141% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-62013MEDIUM | WordPress UiChemy plugin <= 4.0.0 - Broken Access Control vulnerabilityMissing Authorization vulnerability in POSIMYTH UiChemy uichemy.This issue affects UiChemy: from n/a through <= 4.0.0. CWE-862Oct 22, 2025 | CVSS4.3v3.1 | EPSS0.23% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |