POSIMYTH
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| The Plus Addons for Elementor Page Builder Lite | 9 | – | Sep 30, 2026 |
| Nexter Blocks | 8 | – | Apr 8, 2026 |
| UiChemy | 2 | – | Jan 6, 2026 |
| Nexter Extension | 2 | – | Dec 29, 2023 |
| Nexter | 2 | – | Jun 19, 2024 |
| Sticky Header Effects for Elementor | 1 | – | Sep 22, 2025 |
| WDesignkit | 1 | – | Dec 6, 2024 |
Exploited and recent CVEs
- CVE-2026-96829 WordPress The Plus Addons for Elementor Page Builder Lite plugin <= 6.5.1 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-39516 WordPress Nexter Blocks plugin <= 4.7.0 - Sensitive Data Exposure vulnerability 0.2%
- CVE-2024-50452 WordPress Nexter Blocks plugin <= 3.3.3 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2026-24377 WordPress Nexter Blocks plugin <= 4.6.3 - Sensitive Data Exposure vulnerability 0.2%
- CVE-2025-69362 WordPress UiChemy plugin <= 4.4.2 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2024-23511 WordPress The Plus Addons for Elementor plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-62013 WordPress UiChemy plugin <= 4.0.0 - Broken Access Control vulnerability 0.2%
- CVE-2025-58251 WordPress Sticky Header Effects for Elementor Plugin <= 2.1.2 - Broken Access Control Vulnerability 0.2%
- CVE-2025-54739 WordPress Nexter Blocks Plugin <= 4.5.4 - Broken Access Control Vulnerability 0.3%
- CVE-2025-55712 WordPress The Plus Addons for Elementor Page Builder Lite Plugin <= 6.3.13 - Broken Access Control Vulnerability 0.2%
- CVE-2025-49076 WordPress The Plus Addons for Elementor Page Builder Lite plugin <= 6.2.7 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2024-56294 WordPress Nexter Blocks plugin <= 4.0.7 - Broken Access Control vulnerability 0.4%
- CVE-2024-56246 WordPress Nexter Blocks plugin <= 4.0.4 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-53823 WordPress The Plus Addons for Elementor plugin <= 5.6.14 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-53811 WordPress WDesignKit plugin <= 1.0.40 - Arbitrary File Upload vulnerability 0.3%
- CVE-2024-43932 WordPress The Plus Addons for Elementor plugin <= 5.6.2 - Broken Access Control vulnerability 0.6%
- CVE-2024-43977 WordPress The Plus Addons for Elementor plugin <= 5.6.2 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2023-45658 WordPress Nexter theme <= 2.0.3 - Broken Access Control vulnerability 0.4%
- CVE-2024-33572 WordPress Nexter Blocks plugin <= 3.2.5 - Broken Access Control vulnerability 0.4%
- CVE-2024-35709 WordPress The Plus Addons for Elementor plugin <= 5.5.4 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-34373 WordPress The Plus Addons for Elementor plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-30435 WordPress Nexter Blocks plugin <= 3.2.5 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2023-45751 WordPress Nexter Extension Plugin <= 2.0.3 is vulnerable to Remote Code Execution (RCE) 0.7%
- CVE-2023-45657 WordPress Nexter Theme <= 2.0.3 is vulnerable to SQL Injection 1.6%
- CVE-2023-45750 WordPress Nexter Extension Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS) 0.5%