Skip to content
OpenAdvisories
Medium · 4.3 CVE-2026-24377 EUVD-2026-3820GHSA-mqq6-2252-927j

WordPress Nexter Blocks plugin <= 4.6.3 - Sensitive Data Exposure vulnerability

Published Jan 22, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor allows Retrieve Embedded Sensitive Data.This issue affects Nexter Blocks: from n/a through <= 4.6.3.

Affected products

VendorProductAffectedFixed
POSIMYTH Nexter Blocks ≤ 4.6.3 —

References