PO
Vendor
posimyththemes
8
CVEs
0
On KEV
2
New 30D
Products
NE7.5
Nexter Extension – Security, Performance, Code Snippets & Site Toolkit
posimyththemes
1 CVEs0 on KEV1 new
UC6.4
UiChemy – Convert Figma, Prompts and AI Builds to Elementor, Gutenberg and Bricks
posimyththemes
1 CVEs0 on KEV1 new
TP6.4
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce
posimyththemes
4 CVEs0 on KEV0 new
NB6.4
Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder
posimyththemes
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-109385 New | UC UiChemy – Convert Figma, Prompts and AI Builds to Elementor, Gutenberg and Bricks posimyththemes | 6.4 | Oct 28 | UiChemy <= 5.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slot Link URL |
| CVE-2026-111114 | NE Nexter Extension – Security, Performance, Code Snippets & Site Toolkit posimyththemes | 7.5 | Oct 16 | Nexter Extension <= 4.7.11 - Authenticated (Subscriber+) Privilege Escalation to 'reset-view' Parameter |
| CVE-2026-15420 | NB Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder posimyththemes | 4.3 | Jul 24 | Nexter Blocks <= 5.0.0 - Authenticated (Subscriber+) Path Traversal to Arbitrary CSS/JS File Deletion via 'plus_name' Parameter |
| CVE-2026-15285 | TP The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce posimyththemes | 6.4 | Jul 10 | The Plus Addons for Elementor <= 6.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget Custom Attributes |
| CVE-2026-6740 | NB Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder posimyththemes | 6.4 | Jul 8 | Nexter Blocks <= 4.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'commentIcon' Block Attribute |
| CVE-2026-9243 | TP The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce posimyththemes | 6.4 | May 29 | The Plus Addons for Elementor <= 6.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'carousel_direction' Parameter |
| CVE-2026-5243 | TP The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce posimyththemes | 6.4 | May 14 | The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Navigation Menu Lite Widget |
| CVE-2026-3311 | TP The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce posimyththemes | 6.4 | Apr 8 | The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Progress Bar |