WordPress plugin
Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium14
- Low0
All Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder vulnerabilities
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting
≤5.0.1Update to 5.0.2
- Medium4.3Payment Bypass to Authenticated (Contributor+) Stored CSS Injection
≤5.0.1Update to 5.0.2
- Medium4.3Authenticated (Subscriber+) Path Traversal to Arbitrary CSS/JS File Deletion via 'plus_name' Parameter
≤5.0.0Update to 5.0.1
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'commentIcon' Block Attribute
≤4.7.4Update to 4.7.5
- Medium5.3Unauthenticated Information Exposure
≤4.7.0Update to 4.7.1
- Medium4.3Authenticated (Subscriber+) Information Exposure
≤4.6.3Update to 4.6.4
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
≤4.5.4Update to 4.5.5
- Medium5.3Missing Authorization
≤4.5.4Update to 4.5.5
- Medium4.3Missing Authorization
≤4.0.7Update to 4.0.8
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤4.0.4Update to 4.0.5
- Medium6.4Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library
≤3.59.4Update to 3.59.5
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤3.3.3Update to 4.0.0
- Medium4.3Missing Authorization
≤3.2.5Update to 3.2.6
- Medium6.1Reflected Cross-Site Scripting
≤3.2.5Update to 3.2.6
Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder: common questions
Does Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder have known vulnerabilities?
Yes. VulnCrest Radar lists 14 known vulnerabilities in Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder: 14 medium. At least one is not fixed in the latest version.
How do I check which version of Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder vulnerability?
CVE-2025-15678, published Aug 3, 2026: Nexter Blocks <= 5.0.1 - Authenticated (Author+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).
Is any Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder vulnerability listed in CISA KEV?
No. None of the known Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder vulnerabilities is currently listed in the CISA KEV catalog.