Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder

Explore Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder vulnerabilities across all versions. Currently tracking 12 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSMedium

5.5/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder vulnerabilities before they are exploited.

Vulnerability Records

12 records


2026-07-23 14:21	Nexter Blocks <= 5.0.0 - Authenticated (Subscriber+) Path Traversal to Arbitrary CSS/JS File Deletion via 'plus_name' Parameter Nexter Blocks <= 5.0.0	`CVE-2026-15420`	4.3 Medium	Wordfence PRISM	Yes
2026-07-07 23:56	Nexter Blocks <= 4.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'commentIcon' Block Attribute Nexter Blocks <= 4.7.4	`CVE-2026-6740`	6.4 Medium	Muhammad Yudha - DJ	Yes
2026-03-26 00:00	Nexter Blocks <= 4.7.0 - Unauthenticated Information Exposure Nexter Blocks <= 4.7.0	`CVE-2026-39516`	5.3 Medium	Bao - BlueRock	Yes
2026-01-26 00:00	Nexter Blocks <= 4.6.3 - Authenticated (Subscriber+) Information Exposure Nexter Blocks <= 4.6.3	`CVE-2026-24377`	4.3 Medium	Nabil Irawan	Yes
2025-08-18 19:56	Nexter Blocks <= 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets Nexter Blocks <= 4.5.4	`CVE-2025-8567`	6.4 Medium	zer0gh0st	Yes
2025-08-14 00:00	Nexter Blocks <= 4.5.4 - Missing Authorization Nexter Blocks <= 4.5.4	`CVE-2025-54739`	5.3 Medium	MD ISMAIL	Yes
2025-01-03 00:00	Nexter Blocks <= 4.0.7 - Missing Authorization Nexter Blocks <= 4.0.7	`CVE-2024-56294`	4.3 Medium	Khalid Yusuf	Yes
2024-12-30 00:00	Nexter Blocks <= 4.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting Nexter Blocks <= 4.0.4	`CVE-2024-56246`	6.4 Medium	João Pedro Soares de Alcântara	Yes
2024-12-03 00:00	Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library Nexter Blocks <= 4.3.1	`CVE-2024-5020`	6.4 Medium	Webbernaut	Yes
2024-10-24 00:00	Nexter Blocks <= 3.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Nexter Blocks <= 3.3.3	`CVE-2024-50452`	6.4 Medium	João Pedro Soares de Alcântara	Yes

Showing 1–10 of 12 reports