POSIMYTH

Products

ProductCVEsExploitedLatest
The Plus Addons for Elementor Page Builder Lite9–Sep 30, 2026
Nexter Blocks8–Apr 8, 2026
UiChemy2–Jan 6, 2026
Nexter Extension2–Dec 29, 2023
Nexter2–Jun 19, 2024
Sticky Header Effects for Elementor1–Sep 22, 2025
WDesignkit1–Dec 6, 2024

Exploited and recent CVEs

  • CVE-2026-96829 Medium 6.5 WordPress The Plus Addons for Elementor Page Builder Lite plugin <= 6.5.1 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-39516 Medium 5.3 WordPress Nexter Blocks plugin <= 4.7.0 - Sensitive Data Exposure vulnerability 0.2%
  • CVE-2024-50452 Medium 6.5 WordPress Nexter Blocks plugin <= 3.3.3 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-24377 Medium 4.3 WordPress Nexter Blocks plugin <= 4.6.3 - Sensitive Data Exposure vulnerability 0.2%
  • CVE-2025-69362 Medium 5.9 WordPress UiChemy plugin <= 4.4.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2024-23511 Medium 6.5 WordPress The Plus Addons for Elementor plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-62013 Medium 4.3 WordPress UiChemy plugin <= 4.0.0 - Broken Access Control vulnerability 0.2%
  • CVE-2025-58251 Medium 4.3 WordPress Sticky Header Effects for Elementor Plugin <= 2.1.2 - Broken Access Control Vulnerability 0.2%
  • CVE-2025-54739 Medium 5.3 WordPress Nexter Blocks Plugin <= 4.5.4 - Broken Access Control Vulnerability 0.3%
  • CVE-2025-55712 Medium 6.5 WordPress The Plus Addons for Elementor Page Builder Lite Plugin <= 6.3.13 - Broken Access Control Vulnerability 0.2%
  • CVE-2025-49076 Medium 6.5 WordPress The Plus Addons for Elementor Page Builder Lite plugin <= 6.2.7 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2024-56294 Medium 6.4 WordPress Nexter Blocks plugin <= 4.0.7 - Broken Access Control vulnerability 0.4%
  • CVE-2024-56246 Medium 6.5 WordPress Nexter Blocks plugin <= 4.0.4 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-53823 Medium 6.5 WordPress The Plus Addons for Elementor plugin <= 5.6.14 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-53811 Medium 6.6 WordPress WDesignKit plugin <= 1.0.40 - Arbitrary File Upload vulnerability 0.3%
  • CVE-2024-43932 Medium 6.5 WordPress The Plus Addons for Elementor plugin <= 5.6.2 - Broken Access Control vulnerability 0.6%
  • CVE-2024-43977 Medium 6.5 WordPress The Plus Addons for Elementor plugin <= 5.6.2 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-45658 High 7.6 WordPress Nexter theme <= 2.0.3 - Broken Access Control vulnerability 0.4%
  • CVE-2024-33572 Medium 4.3 WordPress Nexter Blocks plugin <= 3.2.5 - Broken Access Control vulnerability 0.4%
  • CVE-2024-35709 Medium 6.5 WordPress The Plus Addons for Elementor plugin <= 5.5.4 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-34373 Medium 6.5 WordPress The Plus Addons for Elementor plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-30435 High 7.1 WordPress Nexter Blocks plugin <= 3.2.5 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2023-45751 Critical 9.1 WordPress Nexter Extension Plugin <= 2.0.3 is vulnerable to Remote Code Execution (RCE) 0.7%
  • CVE-2023-45657 High 8.5 WordPress Nexter Theme <= 2.0.3 is vulnerable to SQL Injection 1.6%
  • CVE-2023-45750 High 7.1 WordPress Nexter Extension Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS) 0.5%