posimyththemes Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder

• CVE-2026-15420 Medium 4.3 Nexter Blocks <= 5.0.0 - Authenticated (Subscriber+) Path Traversal to Arbitrary CSS/JS File Deletion via 'plus_name' Parameter 0.9%
• CVE-2026-6740 Medium 6.4 Nexter Blocks <= 4.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'commentIcon' Block Attribute 0.3%
• CVE-2025-8567 Medium 6.4 Nexter Blocks <= 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets 0.3%
• CVE-2024-5020 Medium 6.4 Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library 0.4%