Vendor
POSIMYTH
58 known vulnerabilities in products by POSIMYTH, 0 of them actively exploited (CISA KEV).
Key figures
58
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-24175 | The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication Bypass | 9.8 | |
| Critical | CVE-2021-24949 | The Plus Addons for Elementor Pro < 5.0.7 - Unauthenticated SQL Injection | 9.8 | |
| Critical | CVE-2023-45657 | WordPress Nexter Theme <= 2.0.3 is vulnerable to SQL Injection | 8.5 | |
| High | CVE-2021-24948 | The Plus Addons for Elementor Pro < 5.0.7 - Sensitive Data Disclosure | 7.5 | |
| Medium | CVE-2021-24351 | The Plus Addons for Elementor < 4.1.12 - Reflected Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2021-24358 | The Plus Addons for Elementor Page Builder < 4.1.10 - Open Redirect | 6.1 | |
| High | CVE-2021-4331 | Posimyththemes The Plus Addons for Elementor Page Builder Pro: Missing Authorization | 8.8 | |
| Critical | CVE-2023-45751 | WordPress Nexter Extension Plugin <= 2.0.3 is vulnerable to Remote Code Execution (RCE) | 9.1 | |
| Critical | CVE-2023-47178 | POSIMYTH Innovation The Plus Addons for Elementor Pro: Path Traversal | 8.6 | |
| High | CVE-2024-5455 | Posimyththemes The Plus Addons for Elementor Page Builder Pro: PHP Remote File Inclusion | 8.8 | |
| Medium | CVE-2021-24359 | The Plus Addons for Elementor Page Builder < 4.1.11 - Arbitrary Reset Pwd Email Sending | 5.3 | |
| Medium | CVE-2021-4332 | POSIMYTH The Plus Addons For Elementor: External Control of File Name or Path | 6.5 | |
| Medium | CVE-2024-4484 | POSIMYTH The Plus Addons For Elementor: Cross-site Scripting | 6.4 | |
| Medium | CVE-2026-96829 | POSIMYTH The Plus Addons for Elementor Page Builder Lite: Cross-site Scripting | 6.5 | |
| High | CVE-2024-43932 | WordPress The Plus Addons for Elementor plugin <= 5.6.2 - Broken Access Control vulnerability | 6.5 | |
| High | CVE-2024-2203 | POSIMYTH The Plus Addons For Elementor: Path Traversal | 6.4 | |
| High | CVE-2023-45750 | WordPress Nexter Extension Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS) | 7.1 | |
| Medium | CVE-2024-0445 | The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | |
| Medium | CVE-2024-3199 | POSIMYTH The Plus Addons For Elementor: Cross-site Scripting | 6.4 | |
| High | CVE-2024-30435 | WordPress Nexter Blocks plugin <= 3.2.5 - Reflected Cross Site Scripting (XSS) vulnerability | 7.1 | |
| Medium | CVE-2024-2210 | POSIMYTH The Plus Addons For Elementor: Path Traversal | 6.4 | |
| Medium | CVE-2024-11829 | POSIMYTH The Plus Addons For Elementor: Cross-site Scripting | 6.4 | |
| High | CVE-2023-45658 | WordPress Nexter theme <= 2.0.3 - Broken Access Control vulnerability | 7.6 | |
| Medium | CVE-2024-3197 | POSIMYTH The Plus Addons For Elementor: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-50452 | WordPress Nexter Blocks plugin <= 3.3.3 - Cross Site Scripting (XSS) vulnerability | 6.5 |
Products
| The Plus Addons for Elementor | 37 | 0 |
| The Plus Addons For Elementor Page Builder Lite | 10 | 0 |
| Nexter Blocks | 9 | 0 |
| Nexter Extension | 4 | 0 |