What’s Vulnerable › Products

posimyththemes Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your posimyththemes Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder version is affected

Latest posimyththemes Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder vulnerabilities

• CVE-2026-15420 — Nexter Blocks <= 5.0.0 - Authenticated (Subscriber+) Path Traversal to Arbitrary CSS/JS File Deletion via 'plus_name' Parameter (CVSS 4.3)
• CVE-2026-6740 — Nexter Blocks <= 4.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'commentIcon' Block Attribute (CVSS 6.4)
• CVE-2025-8567 — Nexter Blocks <= 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets (CVSS 6.4)
• CVE-2024-5020 — Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library (CVSS 6.4)