Wpdive vulnerabilities

Products

• Better Elementor Addons 4
• Better Addons For Elementor 3
• Nexa Blocks 3
• Elementcamp 2
• Nexa Blocks – Gutenberg Blocks, Page Builder For Gutenberg Editor & Fse 2

Newest

• wpdive nexa blocks – gutenberg blocks, page builder for gutenberg editor & fse Nexa Blocks <= 1.1.1 - Unauthenticated Blind Server-Side Request Forgery via 'demo_json_file' Parameter CVE-2026-6394 5.4 MediumMay 20, 2026
• wpdive nexa blocks WordPress Nexa Blocks plugin <= 1.1.1 - PHP Object Injection vulnerability CVE-2026-25429 9.8 CriticalMarch 25, 2026
• wpdive elementcamp ElementCamp <= 2.3.6 - Authenticated (Author+) SQL Injection via 'meta_query[compare]' Parameter CVE-2026-2503 6.5 MediumMarch 21, 2026
• wpdive elementcamp WordPress ElementCamp plugin <= 2.3.2 - Broken Access Control vulnerability CVE-2026-24556 5.3 MediumJanuary 23, 2026
• wpdive better elementor addons WordPress Better Elementor Addons plugin <= 1.3.7 - Broken Access Control vulnerability CVE-2023-41656 5.4 MediumDecember 29, 2025
• wpdive better addons for elementor Better Elementor Addons <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider Widget CVE-2025-12830 6.4 MediumDecember 12, 2025
• wpdive nexa blocks – gutenberg blocks, page builder for gutenberg editor & fse Nexa Blocks <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Google Maps Widget CVE-2025-8624 6.4 MediumSeptember 30, 2025
• wpdive nexa blocks WordPress Nexa Blocks plugin <= 1.1.0 - Cross Site Scripting (XSS) Vulnerability CVE-2025-30952 6.5 MediumJune 6, 2025
• wpdive nexa blocks WordPress Nexa Blocks plugin <= 1.1.1 - Server Side Request Forgery (SSRF) vulnerability CVE-2025-30976 4.9 MediumJune 6, 2025
• 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 more Freemius SDK <= 2.4.2 - Missing Authorization Checks CVE-2022-4974 6.3 MediumOctober 16, 2024
• betteraddons better elementor addons WordPress Better Elementor Addons plugin <= 1.4.1 - Local File Inclusion vulnerability CVE-2024-33541 6.5 MediumJune 4, 2024
• betteraddons better elementor addons WordPress Better Elementor Addons plugin <= 1.4.4 - Cross Site Scripting (XSS) vulnerability CVE-2024-34432 6.5 MediumMay 9, 2024
• betteraddons better elementor addons WordPress Better Elementor Addons plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability CVE-2024-30423 6.5 MediumMarch 29, 2024
• kitforest better elementor addons, wpdive better addons for elementor +1 more Better Elementor Addons <= 1.4.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget links CVE-2024-2280 6.4 MediumMarch 29, 2024