What’s Vulnerable › Products
posimyththemes Nexter Extension – Security, Performance, Code Snippets & Site Toolkit vulnerabilities
3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.
Latest posimyththemes Nexter Extension – Security, Performance, Code Snippets & Site Toolkit vulnerabilities
- CVE-2026-111114 — Nexter Extension <= 4.7.11 - Authenticated (Subscriber+) Privilege Escalation to 'reset-view' Parameter (CVSS 7.5)
- CVE-2026-0726 — Nexter Extension – Site Enhancements Toolkit <= 4.4.6 - Unauthenticated PHP Object Injection via 'nxt_unserialize_replace' (CVSS 8.1)
- CVE-2025-13731 — Nexter Extension <= 4.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4)