posimyththemes vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 202422
3. 20257
4. 202611

Newest CVEs

• CVE-2026-109385

  UiChemy <= 5.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slot Link URL

  posimyththemes · UiChemy – Convert Figma, Prompts and AI Builds to Elementor, Gutenberg and Bricks

  Medium6.4
• CVE-2026-111114

  Nexter Extension <= 4.7.11 - Authenticated (Subscriber+) Privilege Escalation to 'reset-view' Parameter

  posimyththemes · Nexter Extension – Security, Performance, Code Snippets & Site Toolkit

  High7.5
• CVE-2026-15420

  Nexter Blocks <= 5.0.0 - Authenticated (Subscriber+) Path Traversal to Arbitrary CSS/JS File Deletion via 'plus_name' Parameter

  posimyththemes · Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder

  Medium4.3
• CVE-2026-15285

  The Plus Addons for Elementor <= 6.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget Custom Attributes

  posimyththemes · The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce

  Medium6.4
• CVE-2026-6740

  Nexter Blocks <= 4.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'commentIcon' Block Attribute

  posimyththemes · Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder

  Medium6.4
• CVE-2026-9243

  The Plus Addons for Elementor <= 6.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'carousel_direction' Parameter

  posimyththemes · The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce

  Medium6.4
• CVE-2026-5243

  The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Navigation Menu Lite Widget

  posimyththemes · The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce

  Medium6.4
• CVE-2026-3311

  The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Progress Bar

  posimyththemes · The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce

  Medium6.4
• CVE-2026-2385

  The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.7 - Unauthenticated Email Relay

  posimyththemes · The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce

  Medium5.3
• CVE-2026-2386

  The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.7 - Incorrect Authorization to Authenticated (Author+) Arbitrary Draft Post Creation via 'post_type'

  posimyththemes · The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce

  Medium4.3