wpdive

Products

Product	CVEs	Exploited	Latest
Nexa Blocks	3	–	Mar 25, 2026
Better Addons for Elementor	2	–	Dec 12, 2025
ElementCamp	2	–	Mar 21, 2026
Nexa Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE	2	–	May 20, 2026
Better Elementor Addons	1	–	Dec 29, 2025

CVE-2026-6394 Medium 5.4 Nexa Blocks <= 1.1.1 - Unauthenticated Blind Server-Side Request Forgery via 'demo_json_file' Parameter 0.3%
CVE-2026-25429 Critical 9.8 WordPress Nexa Blocks plugin <= 1.1.1 - PHP Object Injection vulnerability 0.4%
CVE-2026-2503 Medium 6.5 ElementCamp <= 2.3.6 - Authenticated (Author+) SQL Injection via 'meta_query[compare]' Parameter 0.3%
CVE-2026-24556 Medium 5.3 WordPress ElementCamp plugin <= 2.3.2 - Broken Access Control vulnerability 0.3%
CVE-2023-41656 Medium 5.4 WordPress Better Elementor Addons plugin <= 1.3.7 - Broken Access Control vulnerability 0.2%
CVE-2025-12830 Medium 6.4 Better Elementor Addons <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider Widget 0.2%
CVE-2025-8624 Medium 6.4 Nexa Blocks <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Google Maps Widget 0.2%
CVE-2025-30952 Medium 6.5 WordPress Nexa Blocks plugin <= 1.1.0 - Cross Site Scripting (XSS) Vulnerability 0.3%
CVE-2025-30976 Medium 4.9 WordPress Nexa Blocks plugin <= 1.1.1 - Server Side Request Forgery (SSRF) vulnerability 0.2%
CVE-2024-2280 Medium 6.4 Better Elementor Addons <= 1.4.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget links 0.4%