Plugin icon

Nexter Extension – Security, Performance, Code Snippets & Site Toolkit

nexter-extension

Vulnerabilities:

4

Last Updated:

May 11, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-01-20
Title
Nexter Extension – Site Enhancements Toolkit < 4.4.7 - Unauthenticated PHP Object Injection via 'nxt_unserialize_replace'
Fixed in
Fixed in 4.4.7
CVSS
8.1 (high)
Published
2025-12-01
Title
Nexter Extension < 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 4.4.2
CVSS
6.4 (medium)
Published
2023-10-24
Title
Nexter Extension < 2.0.4 - Reflected XSS
Fixed in
Fixed in 2.0.4
CVSS
7.1 (high)
Published
2023-10-12
Title
Nexter Extension < 2.0.4 - Authenticated(Editor+) Remote Code Execution via metabox
Fixed in
Fixed in 2.0.4
CVSS
7.2 (high)