Skip to content
OpenAdvisories

Vendor

POSIMYTH

25 known vulnerabilities.

POSIMYTH at a glance

Last 12 months
6
Critical · all time
1
Exploited · all time
0
Public exploit · all time
1
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 0 vulnerabilities Dec 2025 January 2026: 3 vulnerabilities February 2026: 1 vulnerability March 2026: 0 vulnerabilities Mar April 2026: 1 vulnerability May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 1 vulnerability Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202610
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202610
Mar 202600
Feb 202610
Jan 202630
Dec 202500
Nov 202500
Oct 202510
Sep 202510
Aug 202520
Jul 202500
Jun 202510
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202520
Dec 202420

Products

The Plus Addons for Elementor Page Builder Lite 9 Nexter Blocks 8 UiChemy 2 Nexter 2 Nexter Extension 2 Sticky Header Effects for Elementor 1 WDesignkit 1
All Critical High Medium Low Exploited only Public exploit

25 results · Feed

  • Medium 6.5
    CVE-2026-96829

    WordPress The Plus Addons for Elementor Page Builder Lite plugin <= 6.5.1 - Cross Site Scripting (XSS) vulnerability

    Contributor Cross Site Scripting (XSS) in The Plus Addons for Elementor Page Builder Lite <= 6.5.1 versions.

    POSIMYTH The Plus Addons for Elementor Page Builder Lite
  • Medium 5.3
    CVE-2026-39516

    WordPress Nexter Blocks plugin <= 4.7.0 - Sensitive Data Exposure vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor allows Retrieve Embedded Sensitive Data.This issue affects Nexter Blocks: from n/a through <= 4.7.0.

    POSIMYTH Nexter Blocks
  • Medium 6.5
    CVE-2024-50452

    WordPress Nexter Blocks plugin <= 3.3.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor allows Stored XSS.This issue affects Nexter Blocks: from n/a through <= 3.3.3.

    POSIMYTH Nexter Blocks
  • Medium 4.3
    CVE-2026-24377

    WordPress Nexter Blocks plugin <= 4.6.3 - Sensitive Data Exposure vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor allows Retrieve Embedded Sensitive Data.This issue affects Nexter Blocks: from n/a through <= 4.6.3.

    POSIMYTH Nexter Blocks
  • Medium 5.9
    CVE-2025-69362

    WordPress UiChemy plugin <= 4.4.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH UiChemy uichemy allows Stored XSS.This issue affects UiChemy: from n/a through <= 4.4.2.

    POSIMYTH UiChemy
  • Medium 6.5
    CVE-2024-23511

    WordPress The Plus Addons for Elementor plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite allows DOM-Based XSS.This issue affects The Plus Addons for Elementor Page Builder Lite: from…

    POSIMYTH The Plus Addons for Elementor Page Builder Lite
  • Medium 4.3
    CVE-2025-62013

    WordPress UiChemy plugin <= 4.0.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in POSIMYTH UiChemy uichemy.This issue affects UiChemy: from n/a through <= 4.0.0.

    POSIMYTH UiChemy
  • Medium 4.3
    CVE-2025-58251

    WordPress Sticky Header Effects for Elementor Plugin <= 2.1.2 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in POSIMYTH Sticky Header Effects for Elementor sticky-header-effects-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sticky Header Effects for Elementor: from n/a th…

    POSIMYTH Sticky Header Effects for Elementor
  • Medium 5.3
    CVE-2025-54739

    WordPress Nexter Blocks Plugin <= 4.5.4 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nexter Blocks: from n/a through <= 4.5.4.

    POSIMYTH Nexter Blocks
  • Medium 6.5
    CVE-2025-55712

    WordPress The Plus Addons for Elementor Page Builder Lite Plugin <= 6.3.13 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite the-plus-addons-for-elementor-page-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Plus Addons for Elementor…

    POSIMYTH The Plus Addons for Elementor Page Builder Lite
  • Medium 6.5
    CVE-2025-49076

    WordPress The Plus Addons for Elementor Page Builder Lite plugin <= 6.2.7 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite the-plus-addons-for-elementor-page-builder allows Stored XSS.This issue affects The Plus Addons for …

    POSIMYTH The Plus Addons for Elementor Page Builder Lite
  • Medium 6.4
    CVE-2024-56294

    WordPress Nexter Blocks plugin <= 4.0.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nexter Blocks: from n/a through <= 4.0.7.

    POSIMYTH Nexter Blocks
  • Medium 6.5
    CVE-2024-56246

    WordPress Nexter Blocks plugin <= 4.0.4 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor allows DOM-Based XSS.This issue affects Nexter Blocks: from n/a through <= 4.0.4.

    POSIMYTH Nexter Blocks
  • Medium 6.5
    CVE-2024-53823

    WordPress The Plus Addons for Elementor plugin <= 5.6.14 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite the-plus-addons-for-elementor-page-builder allows DOM-Based XSS.This issue affects The Plus Addons f…

    POSIMYTH The Plus Addons for Elementor Page Builder Lite
  • Medium 6.6
    CVE-2024-53811

    WordPress WDesignKit plugin <= 1.0.40 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in POSIMYTH WDesignkit wdesignkit allows Upload a Web Shell to a Web Server.This issue affects WDesignkit: from n/a through <= 1.0.40.

    POSIMYTH WDesignkit
  • Medium 6.5
    CVE-2024-43932

    WordPress The Plus Addons for Elementor plugin <= 5.6.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite the-plus-addons-for-elementor-page-builder.This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a through <= 5.6.2.

    POSIMYTH The Plus Addons for Elementor Page Builder Lite
  • Medium 6.5
    CVE-2024-43977

    WordPress The Plus Addons for Elementor plugin <= 5.6.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite the-plus-addons-for-elementor-page-builder allows Stored XSS.This issue affects The Plus Addons for …

    POSIMYTH The Plus Addons for Elementor Page Builder Lite
  • High 7.6
    CVE-2023-45658

    WordPress Nexter theme <= 2.0.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in POSIMYTH Nexter.This issue affects Nexter: from n/a through 2.0.3.

    POSIMYTH Nexter
  • Medium 4.3
    CVE-2024-33572

    WordPress Nexter Blocks plugin <= 3.2.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor.This issue affects Nexter Blocks: from n/a through <= 3.2.5.

    POSIMYTH Nexter Blocks
  • Medium 6.5
    CVE-2024-35709

    WordPress The Plus Addons for Elementor plugin <= 5.5.4 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite the-plus-addons-for-elementor-page-builder.This issue affects The Plus Addons for Elementor Page Bui…

    POSIMYTH The Plus Addons for Elementor Page Builder Lite
  • Medium 6.5
    CVE-2024-34373

    WordPress The Plus Addons for Elementor plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite the-plus-addons-for-elementor-page-builder.This issue affects The Plus Addons for Elementor Page Bui…

    POSIMYTH The Plus Addons for Elementor Page Builder Lite
  • High 7.1
    CVE-2024-30435

    WordPress Nexter Blocks plugin <= 3.2.5 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor.This issue affects Nexter Blocks: from n/a through <= 3.2.5.

    POSIMYTH Nexter Blocks
  • Critical 9.1
    CVE-2023-45751

    WordPress Nexter Extension Plugin <= 2.0.3 is vulnerable to Remote Code Execution (RCE)

    Improper Control of Generation of Code ('Code Injection') vulnerability in POSIMYTH Nexter Extension.This issue affects Nexter Extension: from n/a through 2.0.3.

    POSIMYTH Nexter Extension
  • High 8.5
    CVE-2023-45657 Public exploit

    WordPress Nexter Theme <= 2.0.3 is vulnerable to SQL Injection

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in POSIMYTH Nexter allows SQL Injection.This issue affects Nexter: from n/a through 2.0.3.

    POSIMYTH Nexter
  • High 7.1
    CVE-2023-45750

    WordPress Nexter Extension Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in POSIMYTH Nexter Extension plugin <= 2.0.3 versions.

    POSIMYTH Nexter Extension