Skip to content

Posimyththemes vulnerabilities

Products

Newest

posimyththemes uichemy – convert figma, prompts and ai builds to elementor, gutenberg and bricks UiChemy <= 5.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slot Link URL CVE-2026-109385 6.4 MediumOctober 28, 2026
posimyththemes nexter extension – security, performance, code snippets & site toolkit Nexter Extension <= 4.7.11 - Authenticated (Subscriber+) Privilege Escalation to 'reset-view' Parameter CVE-2026-111114 7.5 HighOctober 16, 2026
posimyththemes nexter blocks – gutenberg blocks, page builder & ai website builder Nexter Blocks <= 5.0.0 - Authenticated (Subscriber+) Path Traversal to Arbitrary CSS/JS File Deletion via 'plus_name' Parameter CVE-2026-15420 4.3 MediumJuly 24, 2026
posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce The Plus Addons for Elementor <= 6.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget Custom Attributes CVE-2026-15285 6.4 MediumJuly 10, 2026
posimyththemes nexter blocks – gutenberg blocks, page builder & ai website builder Nexter Blocks <= 4.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'commentIcon' Block Attribute CVE-2026-6740 6.4 MediumJuly 8, 2026
posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce The Plus Addons for Elementor <= 6.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'carousel_direction' Parameter CVE-2026-9243 6.4 MediumMay 29, 2026
posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Navigation Menu Lite Widg… CVE-2026-5243 6.4 MediumMay 14, 2026
posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Progress Bar CVE-2026-3311 6.4 MediumApril 8, 2026
posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.7 - Unauthenticated Email Relay CVE-2026-2385 5.3 MediumFebruary 22, 2026
posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.7 - Incorrect Authorization to Authenticated (Author+) Arbitrary Draft Post Creation via 'p… CVE-2026-2386 4.3 MediumFebruary 18, 2026
posimyththemes nexter extension – security, performance, code snippets & site toolkit Nexter Extension – Site Enhancements Toolkit <= 4.4.6 - Unauthenticated PHP Object Injection via 'nxt_unserialize_replace' CVE-2026-0726 8.1 HighJanuary 20, 2026
posimyththemes nexter extension – security, performance, code snippets & site toolkit Nexter Extension <= 4.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2025-13731 6.4 MediumDecember 2, 2025
posimyththemes wdesignkit – elementor & gutenberg starter templates, patterns, cloud workspace & widget builder WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder <= 1.2.16 - Missing Authentication via wdkit_handle_review_submission Function CVE-2025-9029 4.3 MediumOctober 4, 2025
posimyththemes nexter blocks – gutenberg blocks, page builder & ai website builder Nexter Blocks <= 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets CVE-2025-8567 6.4 MediumAugust 19, 2025
posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-7646 6.4 MediumAugust 1, 2025
posimyththemes wdesignkit – elementor & gutenberg starter templates, patterns, cloud workspace & widget builder WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-12189 6.4 MediumApril 1, 2025
posimyth the plus addons for elementor, posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +1 more The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets CVE-2025-1287 6.4 MediumMarch 8, 2025
posimyth the plus addons for elementor, posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +1 more The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-11829 6.4 MediumFebruary 1, 2025
10web form maker by 10web – mobile-friendly drag & drop contact form builder, bqworks accordion slider, colorlibplugins fancybox for wordpress +13 more +15 more Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library CVE-2024-5020 6.4 MediumDecember 4, 2024
posimyth the plus addons for elementor, posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +1 more The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.0.3 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates CVE-2024-10365 4.3 MediumNovember 20, 2024
posimyth the plus addons for elementor, posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +1 more The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via content_template CVE-2024-8913 4.3 MediumOctober 11, 2024
posimyth the plus addons for elementor, posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +1 more The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonials Widget Settings CVE-2024-5583 6.4 MediumAugust 22, 2024
posimyth the plus addons for elementor, posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +1 more The Plus Addons for Elementor <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via TP Page Scroll Widget CVE-2024-6575 6.4 MediumAugust 20, 2024
posimyth the plus addons for elementor, posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +1 more The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Widget CVE-2024-5763 6.4 MediumAugust 20, 2024
posimyth the plus addons for elementor, posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +1 more The Plus Addons for Elementor <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget CVE-2024-4482 6.4 MediumJuly 3, 2024
posimyth the plus addons for elementor, posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +1 more The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.0- Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-4983 6.4 MediumJune 27, 2024
posimyth the plus addons for elementor, posimyththemes the plus addons for elementor page builder pro, wordpress plus addon for elementor page builder +2 more The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.6 - Authenticated (Contributor+) Local File Inclusion CVE-2024-5455 8.8 HighJune 21, 2024
posimyth the plus addons for elementor, posimyththemes the plus addons for elementor page builder pro +1 more The Plus Addons for Elementor Page Builder <= 5.5.6 - Reflected Cross-Site Scripting via WP Login and Register Widget CVE-2024-5344 6.1 MediumJune 21, 2024
posimyth the plus addons for elementor, posimyththemes the plus addons for elementor page builder pro +1 more The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Title Widget CVE-2024-5341 6.4 MediumMay 30, 2024
posimyth the plus addons for elementor, posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +1 more The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-4484 6.4 MediumMay 24, 2024
posimyth the plus addons for elementor, posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +1 more The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-4485 6.4 MediumMay 24, 2024
posimyth the plus addons for elementor, posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +1 more The Plus Addons for Elementor <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Progress Bar, Header Meta Content, Scroll Navigation, Pricing Table, & Flip Box CVE-2024-3718 6.4 MediumMay 24, 2024
posimyth the plus addons for elementor, posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +1 more The Plus Addons for Elementor <= 5.5.4 - Authenticated (Contibutor+) Stored Cross-Site Scripting via Hover Card CVE-2024-2784 6.4 MediumMay 24, 2024
posimyth the plus addons for elementor, posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +1 more The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate CVE-2024-2785 6.4 MediumMay 9, 2024
posimyth the plus addons for elementor, posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +1 more The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-0445 6.4 MediumMay 9, 2024
posimyth the plus addons for elementor, posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +1 more The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes CVE-2024-3197 6.4 MediumMay 2, 2024
posimyth the plus addons for elementor, posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +1 more The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget CVE-2024-3199 6.4 MediumMay 2, 2024
posimyth the plus addons for elementor, posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +1 more The Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Clients Widget CVE-2024-2203 6.4 MediumMarch 27, 2024
posimyth the plus addons for elementor, posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +1 more The Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Team Member Listing CVE-2024-2210 6.4 MediumMarch 27, 2024
posimyth the plus addons for elementor, posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +1 more The Plus Addons for Elementor <= 5.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Header Meta Content Widget CVE-2024-1419 6.4 MediumMarch 7, 2024
posimyth the plus addons for elementor, posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +1 more The Plus Addons for Elementor PRO <= 4.1.9 & The Plus Addons for Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read CVE-2021-4332 6.5 MediumMarch 7, 2023
posimyth the plus addons for elementor, posimyththemes the plus addons for elementor page builder pro, the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerce +2 more The Plus Addons for Elementor PRO <= 4.1.9 & The Plus Addons for Elementor <= 2.0.6 - Authenticated (Contributor+) Privilege Escalation CVE-2021-4331 8.8 HighMarch 7, 2023