Wpdive

11 CVEs across 5 Wpdive products. Browse Wpdive vulnerabilities, severities, and proof-of-concept exploits.

Wpdive products with known CVEs

ProductCVEs
Better Addons For Elementor3
Nexa Blocks3
Elementcamp2
Nexa Blocks – Gutenberg Blocks, Page Builder For Gutenberg Editor & Fse2
Better Elementor Addons1
Wpdive CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-6394Medium5.42026-05-20The Nexa Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF) in version…
CVE-2026-25429Critical9.82026-03-25Deserialization of Untrusted Data vulnerability in wpdive Nexa Blocks nexa-blocks allows Object Injection.This issue affects Nexa Blocks: from n/a through <= 1…
CVE-2026-2503Medium6.52026-03-21The ElementCamp plugin for WordPress is vulnerable to time-based SQL Injection via the 'meta_query[compare]' parameter in the 'tcg_select2_search_post' AJAX ac…
CVE-2026-24556Medium5.32026-01-23Missing Authorization vulnerability in wpdive ElementCamp element-camp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec…
CVE-2023-41656Medium5.42025-12-30Missing Authorization vulnerability in wpdive Better Elementor Addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect…
CVE-2025-12830Medium6.42025-12-12The Better Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Slider widget in all versions up to, and including, 1.5.5…
CVE-2025-8624Medium6.42025-09-30The Nexa Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Google Maps widget in all versions up to, and including, 1.1…
CVE-2025-30976Medium4.92025-06-06Server-Side Request Forgery (SSRF) vulnerability in wpdive Nexa Blocks nexa-blocks allows Server Side Request Forgery.This issue affects Nexa Blocks: from n/a…
CVE-2025-30952Medium6.52025-06-06Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdive Nexa Blocks nexa-blocks allows Stored XSS.This iss…
CVE-2022-4974Medium6.32024-10-16The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to…
CVE-2024-2280Medium6.42024-03-29The Better Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the widget link URL values in all versions up to, and includi…