Nexter Blocks
the-plus-addons-for-block-editor · plugin
Known security vulnerabilities for Nexter Blocks. Find out in seconds which version runs on your site with WP Lens.
11 known vulnerabilities
latest Jul 24, 2026
Vulnerabilities
- High 8.8
WordPress Nexter Blocks plugin <= 3.2.5 - Broken Access Control vulnerability
- High 7.1
WordPress Nexter Blocks plugin <= 3.2.5 - Reflected Cross Site Scripting (XSS) vulnerability
- Medium 6.5
WordPress Nexter Blocks plugin <= 3.3.3 - Cross Site Scripting (XSS) vulnerability
- Medium 6.5
WordPress Nexter Blocks plugin <= 4.0.4 - Cross Site Scripting (XSS) vulnerability
- Medium 6.4
Nexter Blocks <= 4.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'commentIcon' Block Attribute
- Medium 6.4
Nexter Blocks <= 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
- Medium 6.4
WordPress Nexter Blocks plugin <= 4.0.7 - Broken Access Control vulnerability
- Medium 5.3
WordPress Nexter Blocks plugin <= 4.7.0 - Sensitive Data Exposure vulnerability
- Medium 5.3
WordPress Nexter Blocks Plugin <= 4.5.4 - Broken Access Control Vulnerability
- Medium 4.3
Nexter Blocks <= 5.0.0 - Authenticated (Subscriber+) Path Traversal to Arbitrary CSS/JS File Deletion via 'plus_name' Parameter
- Medium 4.3
WordPress Nexter Blocks plugin <= 4.6.3 - Sensitive Data Exposure vulnerability