PO
Vendor
posimyththemes
40
CVEs
0
On KEV
2
New 30D
Products
NE8.1
Nexter Extension – Security, Performance, Code Snippets & Site Toolkit
posimyththemes
3 CVEs0 on KEV1 new
UC6.4
UiChemy – Convert Figma, Prompts and AI Builds to Elementor, Gutenberg and Bricks
posimyththemes
1 CVEs0 on KEV1 new
TP8.8
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce
posimyththemes
27 CVEs0 on KEV0 new
NB6.4
Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder
posimyththemes
4 CVEs0 on KEV0 new
TP8.8
The Plus Addons for Elementor Page Builder Pro
posimyththemes
3 CVEs0 on KEV0 new
WE6.4
WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder
posimyththemes
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-109385 New | UC UiChemy – Convert Figma, Prompts and AI Builds to Elementor, Gutenberg and Bricks posimyththemes | 6.4 | Oct 28 | UiChemy <= 5.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slot Link URL |
| CVE-2026-111114 | NE Nexter Extension – Security, Performance, Code Snippets & Site Toolkit posimyththemes | 7.5 | Oct 16 | Nexter Extension <= 4.7.11 - Authenticated (Subscriber+) Privilege Escalation to 'reset-view' Parameter |
| CVE-2026-15420 | NB Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder posimyththemes | 4.3 | Jul 24 | Nexter Blocks <= 5.0.0 - Authenticated (Subscriber+) Path Traversal to Arbitrary CSS/JS File Deletion via 'plus_name' Parameter |
| CVE-2026-15285 | TP The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce posimyththemes | 6.4 | Jul 10 | The Plus Addons for Elementor <= 6.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget Custom Attributes |
| CVE-2026-6740 | NB Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder posimyththemes | 6.4 | Jul 8 | Nexter Blocks <= 4.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'commentIcon' Block Attribute |
| CVE-2026-9243 | TP The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce posimyththemes | 6.4 | May 29 | The Plus Addons for Elementor <= 6.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'carousel_direction' Parameter |
| CVE-2026-5243 | TP The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce posimyththemes | 6.4 | May 14 | The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Navigation Menu Lite Widget |
| CVE-2026-3311 | TP The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce posimyththemes | 6.4 | Apr 8 | The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Progress Bar |
| CVE-2026-2385 | TP The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce posimyththemes | 5.3 | Feb 22 | The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.7 - Unauthenticated Email Relay |
| CVE-2026-2386 | TP The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce posimyththemes | 4.3 | Feb 18 | The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.7 - Incorrect Authorization to Authenticated (Author+) Arbitrary Draft Post Creation via 'post_type' |
| CVE-2026-0726 | NE Nexter Extension – Security, Performance, Code Snippets & Site Toolkit posimyththemes | 8.1 | Jan 20 | Nexter Extension – Site Enhancements Toolkit <= 4.4.6 - Unauthenticated PHP Object Injection via 'nxt_unserialize_replace' |
| CVE-2025-13731 | NE Nexter Extension – Security, Performance, Code Snippets & Site Toolkit posimyththemes | 6.4 | Dec 2 | Nexter Extension <= 4.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode |
| CVE-2025-9029 | WE WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder posimyththemes | 4.3 | Oct 4 | WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder <= 1.2.16 - Missing Authentication via wdkit_handle_review_submission Function |
| CVE-2025-8567 | NB Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder posimyththemes | 6.4 | Aug 19 | Nexter Blocks <= 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets |
| CVE-2025-7646 | TP The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce posimyththemes | 6.4 | Aug 1 | The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-12189 | WE WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder posimyththemes | 6.4 | Apr 1 | WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2025-1287 | TP The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce posimyththemes | 5.4 | Mar 8 | The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets |
| CVE-2024-11829 | TP The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce posimyththemes | 5.4 | Feb 1 | The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-5020 | NB Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder posimyththemes | 6.4 | Dec 4 | Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library |
| CVE-2024-10365 | TP The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce posimyththemes | 4.3 | Nov 20 | The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.0.3 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates |
| CVE-2024-8913 | TP The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce posimyththemes | 4.3 | Oct 11 | The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via content_template |
| CVE-2024-5583 | TP The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce posimyththemes | 5.4 | Aug 22 | The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonials Widget Settings |
| CVE-2024-6575 | TP The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce posimyththemes | 5.4 | Aug 20 | The Plus Addons for Elementor <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via TP Page Scroll Widget |
| CVE-2024-5763 | TP The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce posimyththemes | 5.4 | Aug 20 | The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Widget |
| CVE-2024-4482 | TP The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce posimyththemes | 5.4 | Jul 3 | The Plus Addons for Elementor <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget |
| CVE-2024-4983 | TP The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce posimyththemes | 5.4 | Jun 27 | The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.0- Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-5455 | TP The Plus Addons for Elementor Page Builder Pro posimyththemes | 8.8 | Jun 21 | The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.6 - Authenticated (Contributor+) Local File Inclusion |
| CVE-2024-5344 | TP The Plus Addons for Elementor Page Builder Pro posimyththemes | 6.1 | Jun 21 | The Plus Addons for Elementor Page Builder <= 5.5.6 - Reflected Cross-Site Scripting via WP Login and Register Widget |
| CVE-2024-5341 | TP The Plus Addons for Elementor Page Builder Pro posimyththemes | 5.4 | May 30 | The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Title Widget |
| CVE-2024-4484 | TP The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce posimyththemes | 5.4 | May 24 | The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-4485 | TP The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce posimyththemes | 5.4 | May 24 | The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-3718 | TP The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce posimyththemes | 5.4 | May 24 | The Plus Addons for Elementor <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Progress Bar, Header Meta Content, Scroll Navigation, Pricing Table, & Flip Box |
| CVE-2024-2784 | TP The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce posimyththemes | 5.4 | May 24 | The Plus Addons for Elementor <= 5.5.4 - Authenticated (Contibutor+) Stored Cross-Site Scripting via Hover Card |
| CVE-2024-2785 | TP The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce posimyththemes | 5.4 | May 9 | The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate |
| CVE-2024-0445 | TP The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce posimyththemes | 5.4 | May 9 | The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-3197 | TP The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce posimyththemes | 5.4 | May 2 | The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes |
| CVE-2024-3199 | TP The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce posimyththemes | 5.4 | May 2 | The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget |
| CVE-2024-2203 | TP The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce posimyththemes | 8.8 | Mar 27 | The Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Clients Widget |
| CVE-2024-2210 | TP The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce posimyththemes | 6.4 | Mar 27 | The Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Team Member Listing |
| CVE-2024-1419 | TP The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce posimyththemes | 5.4 | Mar 7 | The Plus Addons for Elementor <= 5.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Header Meta Content Widget |
