wpdive vulnerabilities
11 published CVEs name wpdive among the affected products.
- 11Published CVEs11 of them scored
- 6Last 12 monthspublished in the last year
- 1Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-6394
Nexa Blocks <= 1.1.1 - Unauthenticated Blind Server-Side Request Forgery via 'demo_json_file' Parameter
wpdive · Nexa Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
Medium5.4 - CVE-2026-25429
WordPress Nexa Blocks plugin <= 1.1.1 - PHP Object Injection vulnerability
wpdive · Nexa Blocks
Critical9.8 - CVE-2026-2503
ElementCamp <= 2.3.6 - Authenticated (Author+) SQL Injection via 'meta_query[compare]' Parameter
wpdive · ElementCamp
Medium6.5 - CVE-2026-24556
WordPress ElementCamp plugin <= 2.3.2 - Broken Access Control vulnerability
wpdive · ElementCamp
Medium5.3 - CVE-2023-41656
WordPress Better Elementor Addons plugin <= 1.3.7 - Broken Access Control vulnerability
wpdive · Better Elementor Addons
Medium5.4 - CVE-2025-12830
Better Elementor Addons <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider Widget
wpdive · Better Addons for Elementor
Medium6.4 - CVE-2025-8624
Nexa Blocks <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Google Maps Widget
wpdive · Nexa Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
Medium6.4 - CVE-2025-30952
WordPress Nexa Blocks plugin <= 1.1.0 - Cross Site Scripting (XSS) Vulnerability
wpdive · Nexa Blocks
Medium6.5 - CVE-2025-30976
WordPress Nexa Blocks plugin <= 1.1.1 - Server Side Request Forgery (SSRF) vulnerability
wpdive · Nexa Blocks
Medium4.9 - CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress
Medium6.3