Security
فارسی
All products

the-plus-addons-for-block-editor

WordPress · Plugin
14 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Nexter Blocks <= 5.0.1 - Payment Bypass to Authenticated (Contributor+) Stored CSS InjectionCVE-2026-17011 the-plus-addons-for-block-editor WordPress Medium Fix reported
Nexter Blocks <= 5.0.1 - Authenticated (Author+) Stored Cross-Site ScriptingCVE-2025-15678 the-plus-addons-for-block-editor WordPress Medium Fix reported
Nexter Blocks <= 5.0.0 - Authenticated (Subscriber+) Path Traversal to Arbitrary CSS/JS File Deletion via 'plus_name' ParameterCVE-2026-15420 the-plus-addons-for-block-editor WordPress Medium Fix reported
Nexter Blocks <= 4.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'commentIcon' Block AttributeCVE-2026-6740 the-plus-addons-for-block-editor WordPress Medium Fix reported
Nexter Blocks <= 4.7.0 - Unauthenticated Information ExposureCVE-2026-39516 the-plus-addons-for-block-editor WordPress Medium Fix reported
Nexter Blocks <= 4.6.3 - Authenticated (Subscriber+) Information ExposureCVE-2026-24377 the-plus-addons-for-block-editor WordPress Medium Fix reported
Thumbnail Slider With Lightbox <= 1.0.21 - Authenticated (Contributor+) DOM-Based Stored Cross-Site ScriptingCVE-2024-5020 accordion-slidercolibri-page-builder WordPress Medium Fix reported
Nexter Blocks <= 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple WidgetsCVE-2025-8567 the-plus-addons-for-block-editor WordPress Medium Fix reported
Nexter Blocks <= 4.5.4 - Missing AuthorizationCVE-2025-54739 the-plus-addons-for-block-editor WordPress Medium Fix reported
Nexter Blocks <= 4.0.4 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-56246 the-plus-addons-for-block-editor WordPress Medium Fix reported
Nexter Blocks <= 4.0.7 - Missing AuthorizationCVE-2024-56294 the-plus-addons-for-block-editor WordPress Medium Fix reported
Nexter Blocks <= 3.3.3 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-50452 the-plus-addons-for-block-editor WordPress Medium Fix reported
The Plus Blocks for Block Editor | Gutenberg <= 3.2.5 - Missing AuthorizationCVE-2024-33572 the-plus-addons-for-block-editor WordPress Medium Fix reported
The Plus Blocks for Block Editor | Gutenberg <= 3.2.5 - Reflected Cross-Site ScriptingCVE-2024-30435 the-plus-addons-for-block-editor WordPress Medium Fix reported