PO
Vendor
Posimyth
63
CVEs
0
On KEV
1
New 30D
Products
TP8.8
The Plus Addons for Elementor Page Builder Lite
POSIMYTH
10 CVEs0 on KEV1 new
TP9.8
The Plus Addons For Elementor
Posimyth
37 CVEs0 on KEV0 new
NB8.8
Nexter Blocks
POSIMYTH
7 CVEs0 on KEV0 new
NE9.8
Nexter
POSIMYTH
2 CVEs0 on KEV0 new
NE7.2
Nexter Extension
Posimyth
2 CVEs0 on KEV0 new
UI5.9
UiChemy
POSIMYTH
2 CVEs0 on KEV0 new
SH4.3
Sticky Header Effects for Elementor
POSIMYTH
1 CVEs0 on KEV0 new
TP9.8
The Plus Addons For Elementor Pro
Posimyth
1 CVEs0 on KEV0 new
WD6.6
WDesignkit
POSIMYTH
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-96829 | TP The Plus Addons for Elementor Page Builder Lite POSIMYTH | 6.5 | Sep 30 | WordPress The Plus Addons for Elementor Page Builder Lite plugin <= 6.5.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-39516 | NB Nexter Blocks POSIMYTH | 5.3 | Apr 8 | WordPress Nexter Blocks plugin <= 4.7.0 - Sensitive Data Exposure vulnerability |
| CVE-2024-50452 | NB Nexter Blocks POSIMYTH | 6.5 | Feb 20 | WordPress Nexter Blocks plugin <= 3.3.3 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-24377 | NB Nexter Blocks POSIMYTH | 4.3 | Jan 22 | WordPress Nexter Blocks plugin <= 4.6.3 - Sensitive Data Exposure vulnerability |
| CVE-2025-69362 | UI UiChemy POSIMYTH | 5.9 | Jan 6 | WordPress UiChemy plugin <= 4.4.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-23511 | TP The Plus Addons for Elementor Page Builder Lite POSIMYTH | 6.5 | Jan 5 | WordPress The Plus Addons for Elementor plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-62013 | UI UiChemy POSIMYTH | 4.3 | Oct 22 | WordPress UiChemy plugin <= 4.0.0 - Broken Access Control vulnerability |
| CVE-2025-58251 | SH Sticky Header Effects for Elementor POSIMYTH | 4.3 | Sep 22 | WordPress Sticky Header Effects for Elementor Plugin <= 2.1.2 - Broken Access Control Vulnerability |
| CVE-2025-54739 | NB Nexter Blocks POSIMYTH | 5.3 | Aug 14 | WordPress Nexter Blocks Plugin <= 4.5.4 - Broken Access Control Vulnerability |
| CVE-2025-55712 | TP The Plus Addons for Elementor Page Builder Lite POSIMYTH | 6.5 | Aug 14 | WordPress The Plus Addons for Elementor Page Builder Lite Plugin <= 6.3.13 - Broken Access Control Vulnerability |
| CVE-2025-49076 | TP The Plus Addons for Elementor Page Builder Lite POSIMYTH | 6.5 | Jun 6 | WordPress The Plus Addons for Elementor Page Builder Lite plugin <= 6.2.7 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-1287 | TP The Plus Addons For Elementor Posimyth | 5.4 | Mar 8 | The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets |
| CVE-2024-11829 | TP The Plus Addons For Elementor Posimyth | 5.4 | Feb 1 | The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-56294 | NB Nexter Blocks POSIMYTH | 6.4 | Jan 7 | WordPress Nexter Blocks plugin <= 4.0.7 - Broken Access Control vulnerability |
| CVE-2024-56246 | NB Nexter Blocks POSIMYTH | 6.5 | Jan 2 | WordPress Nexter Blocks plugin <= 4.0.4 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-53823 | TP The Plus Addons for Elementor Page Builder Lite POSIMYTH | 5.4 | Dec 6 | WordPress The Plus Addons for Elementor plugin <= 5.6.14 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-53811 | WD WDesignkit POSIMYTH | 6.6 | Dec 6 | WordPress WDesignKit plugin <= 1.0.40 - Arbitrary File Upload vulnerability |
| CVE-2024-10365 | TP The Plus Addons For Elementor Posimyth | 4.3 | Nov 20 | The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.0.3 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates |
| CVE-2024-43932 | TP The Plus Addons for Elementor Page Builder Lite POSIMYTH | 8.8 | Nov 1 | WordPress The Plus Addons for Elementor plugin <= 5.6.2 - Broken Access Control vulnerability |
| CVE-2024-8913 | TP The Plus Addons For Elementor Posimyth | 4.3 | Oct 11 | The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via content_template |
| CVE-2024-43977 | TP The Plus Addons for Elementor Page Builder Lite POSIMYTH | 5.4 | Sep 17 | WordPress The Plus Addons for Elementor plugin <= 5.6.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-5583 | TP The Plus Addons For Elementor Posimyth | 5.4 | Aug 22 | The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonials Widget Settings |
| CVE-2024-6575 | TP The Plus Addons For Elementor Posimyth | 5.4 | Aug 20 | The Plus Addons for Elementor <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via TP Page Scroll Widget |
| CVE-2024-5763 | TP The Plus Addons For Elementor Posimyth | 5.4 | Aug 20 | The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Widget |
| CVE-2024-4482 | TP The Plus Addons For Elementor Posimyth | 5.4 | Jul 3 | The Plus Addons for Elementor <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget |
| CVE-2024-4983 | TP The Plus Addons For Elementor Posimyth | 5.4 | Jun 27 | The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.0- Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-5455 | TP The Plus Addons For Elementor Posimyth | 8.8 | Jun 21 | The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.6 - Authenticated (Contributor+) Local File Inclusion |
| CVE-2024-5344 | TP The Plus Addons For Elementor Posimyth | 6.1 | Jun 21 | The Plus Addons for Elementor Page Builder <= 5.5.6 - Reflected Cross-Site Scripting via WP Login and Register Widget |
| CVE-2023-45658 | NE Nexter POSIMYTH | 7.6 | Jun 19 | WordPress Nexter theme <= 2.0.3 - Broken Access Control vulnerability |
| CVE-2024-33572 | NB Nexter Blocks POSIMYTH | 8.8 | Jun 9 | WordPress Nexter Blocks plugin <= 3.2.5 - Broken Access Control vulnerability |
| CVE-2024-35709 | TP The Plus Addons for Elementor Page Builder Lite POSIMYTH | 5.4 | Jun 8 | WordPress The Plus Addons for Elementor plugin <= 5.5.4 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-5341 | TP The Plus Addons For Elementor Posimyth | 5.4 | May 30 | The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Title Widget |
| CVE-2024-4484 | TP The Plus Addons For Elementor Posimyth | 5.4 | May 24 | The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-4485 | TP The Plus Addons For Elementor Posimyth | 5.4 | May 24 | The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-3718 | TP The Plus Addons For Elementor Posimyth | 5.4 | May 24 | The Plus Addons for Elementor <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Progress Bar, Header Meta Content, Scroll Navigation, Pricing Table, & Flip Box |
| CVE-2024-2784 | TP The Plus Addons For Elementor Posimyth | 5.4 | May 24 | The Plus Addons for Elementor <= 5.5.4 - Authenticated (Contibutor+) Stored Cross-Site Scripting via Hover Card |
| CVE-2023-47178 | TP The Plus Addons For Elementor Posimyth | 9.8 | May 17 | WordPress The Plus Addons for Elementor Pro plugin <= 5.2.8 - Unauthenticated Local File Inclusion vulnerability |
| CVE-2024-2785 | TP The Plus Addons For Elementor Posimyth | 5.4 | May 9 | The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate |
| CVE-2024-0445 | TP The Plus Addons For Elementor Posimyth | 5.4 | May 9 | The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-34373 | TP The Plus Addons for Elementor Page Builder Lite POSIMYTH | 5.4 | May 6 | WordPress The Plus Addons for Elementor plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-3197 | TP The Plus Addons For Elementor Posimyth | 5.4 | May 2 | The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes |
| CVE-2024-3199 | TP The Plus Addons For Elementor Posimyth | 5.4 | May 2 | The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget |
| CVE-2024-2210 | TP The Plus Addons For Elementor Posimyth | 6.4 | Mar 27 | The The Plus Addons for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.4.1 via the Team Member Listing widget |
| CVE-2024-2203 | TP The Plus Addons For Elementor Posimyth | 8.8 | Mar 27 | The The Plus Addons for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.4.1 via the Clients widget |
| CVE-2024-1419 | TP The Plus Addons For Elementor Posimyth | 5.4 | Mar 7 | The The Plus Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_id’ attribute of the Header Meta Content widget in all versions up… |
| CVE-2023-45751 | NE Nexter Extension Posimyth | 7.2 | Dec 29 | Improper Control of Generation of Code ('Code Injection') vulnerability in POSIMYTH Nexter Extension.This issue affects Nexter Extension: from n/a through 2.0.3 |
| CVE-2023-45657 | NE Nexter Posimyth | 9.8 | Nov 6 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in POSIMYTH Nexter allows SQL Injection.This issue affects Nexter: from n/a… |
| CVE-2023-45750 | NE Nexter Extension Posimyth | 6.1 | Oct 25 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in POSIMYTH Nexter Extension plugin <= 2.0.3 versions |
| CVE-2021-4332 | TP The Plus Addons For Elementor Posimyth | 6.5 | Mar 7 | The Plus Addons for Elementor plugin for WordPress is vulnerable to arbitrary file reads in versions up to, and including 4.1.9 (pro) and 2.0.6 (free) |
| CVE-2021-4331 | TP The Plus Addons For Elementor Posimyth | 8.8 | Mar 7 | The Plus Addons for Elementor plugin for WordPress is vulnerable to privilege escalation in versions up to, and including 4.1.9 (pro) and 2.0.6 (free) |
| CVE-2021-24949 | TP The Plus Addons For Elementor Posimyth | 9.8 | Jan 10 | The "WP Search Filters" widget of The Plus Addons for Elementor - Pro WordPress plugin before 5.0.7 does not sanitise and escape the option parameter before using it in a SQL… |
| CVE-2021-24948 | TP The Plus Addons For Elementor Posimyth | 7.5 | Jan 10 | The Plus Addons for Elementor - Pro WordPress plugin before 5.0.7 does not validate the qvquery parameter of the tp_get_dl_post_info_ajax AJAX action, which could allow… |
| CVE-2021-24359 | TP The Plus Addons For Elementor Posimyth | 5.3 | Jun 14 | The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.11 did not properly check that a user requesting a password reset was the legitimate user, allowing an… |
| CVE-2021-24358 | TP The Plus Addons For Elementor Posimyth | 6.1 | Jun 14 | The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.10 did not validate a redirect parameter on a specifically crafted URL before redirecting the user to it,… |
| CVE-2021-24351 | TP The Plus Addons For Elementor Posimyth | 6.1 | Jun 14 | The theplus_more_post AJAX action of The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.12 did not properly sanitise some of its fields, leading to a reflected… |
| CVE-2021-24266 | TP The Plus Addons For Elementor Page Builder Lite Posimyth | 5.4 | May 5 | The “The Plus Addons for Elementor Page Builder Lite” WordPress Plugin before 2.0.6 has four widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged… |
| CVE-2021-24175 | TP The Plus Addons For Elementor Posimyth | 9.8 | Apr 5 | The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.7 was being actively exploited to by malicious actors to bypass authentication, allowing unauthenticated… |
