wpdive vulnerabilities

CVEs per yearBy the year they were published

1. 20242
2. 20255
3. 20264

Newest CVEs

• CVE-2026-6394

  Nexa Blocks <= 1.1.1 - Unauthenticated Blind Server-Side Request Forgery via 'demo_json_file' Parameter

  wpdive · Nexa Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE

  Medium5.4
• CVE-2026-25429

  WordPress Nexa Blocks plugin <= 1.1.1 - PHP Object Injection vulnerability

  wpdive · Nexa Blocks

  Critical9.8
• CVE-2026-2503

  ElementCamp <= 2.3.6 - Authenticated (Author+) SQL Injection via 'meta_query[compare]' Parameter

  wpdive · ElementCamp

  Medium6.5
• CVE-2026-24556

  WordPress ElementCamp plugin <= 2.3.2 - Broken Access Control vulnerability

  wpdive · ElementCamp

  Medium5.3
• CVE-2023-41656

  WordPress Better Elementor Addons plugin <= 1.3.7 - Broken Access Control vulnerability

  wpdive · Better Elementor Addons

  Medium5.4
• CVE-2025-12830

  Better Elementor Addons <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider Widget

  wpdive · Better Addons for Elementor

  Medium6.4
• CVE-2025-8624

  Nexa Blocks <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Google Maps Widget

  wpdive · Nexa Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE

  Medium6.4
• CVE-2025-30952

  WordPress Nexa Blocks plugin <= 1.1.0 - Cross Site Scripting (XSS) Vulnerability

  wpdive · Nexa Blocks

  Medium6.5
• CVE-2025-30976

  WordPress Nexa Blocks plugin <= 1.1.1 - Server Side Request Forgery (SSRF) vulnerability

  wpdive · Nexa Blocks

  Medium4.9
• CVE-2022-4974

  Freemius SDK <= 2.4.2 - Missing Authorization Checks

  dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress

  Medium6.3