posimyththemes Nexter Extension – Security, Performance, Code Snippets & Site Toolkit

• CVE-2026-111114 High 7.5 Nexter Extension <= 4.7.11 - Authenticated (Subscriber+) Privilege Escalation to 'reset-view' Parameter 0.3%
• CVE-2026-0726 High 8.1 Nexter Extension – Site Enhancements Toolkit <= 4.4.6 - Unauthenticated PHP Object Injection via 'nxt_unserialize_replace' 0.6%
• CVE-2025-13731 Medium 6.4 Nexter Extension <= 4.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.2%