All 3 CVE vulnerabilities found in Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder, with AI-generated Chinese analysis, references, and POCs.
Vendor: posimyththemes
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-15420 | Nexter Blocks <= 5.0.0 - Authenticated (Subscriber+) Path Traversal to Arbitrary CSS/JS File Deletion via 'plus_name' Parameter CWE-22 | 4.3 | Medium | 2026-07-24 |
| CVE-2026-6740 | Nexter Blocks <= 4.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'commentIcon' Block Attribute CWE-79 | 6.4 | Medium | 2026-07-08 |
| CVE-2025-8567 | Nexter Blocks <= 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets CWE-79 | 6.4 | Medium | 2025-08-19 |
All 3 known CVE vulnerabilities affecting Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder with full Chinese analysis, references, and POCs where available.