WordPress Vulnerability Scanner WPSec
Vulnerabilities / Nexter Extension

Nexter Extension vulnerabilities

Advisories WPSec published for Nexter Extension – Security, Performance, Code Snippets & Site Toolkit. Other sources may list more. Its attack surface: Nexter Extension on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-10-16 WPSEC-2026-1083 Nexter Extension <= 4.7.12 - Authenticated (Contributor+) Sensitive Information Exposure via Display Conditions Pickers Medium 4.3 4.7.13
2026-10-16 WPSEC-2026-1082 Nexter Extension <= 4.7.12 - Unauthenticated CAPTCHA Bypass via Missing Cloudflare Turnstile Token Medium 5.3 4.7.13
2026-10-16 WPSEC-2026-1081 Nexter Extension <= 4.7.12 - Authenticated (Author+) Missing Authorization to Image Conversion and Overwrite via Image Optimisation Medium 4.3 4.7.13
2026-10-16 WPSEC-2026-1080 Nexter Extension <= 4.7.12 - Authenticated (Contributor+) Missing Authorization to Post Publication via Post Duplicator Low 3.1 4.7.13
2026-10-15 WPSEC-2026-0984 Nexter Extension – Site Enhancements Toolkit <= 4.7.6 - Authenticated (Subscriber+) Missing Authorization to Post and Term Enumeration via Builder Condition AJAX Actions Medium 4.3 4.7.7
2026-10-15 WPSEC-2026-0983 Nexter Extension – Site Enhancements Toolkit <= 4.7.6 - Missing Authorization to Unauthenticated User Role Modification via View Admin Role Medium 5.3 4.7.7
2026-10-15 WPSEC-2026-0982 Nexter Extension – Site Enhancements Toolkit <= 4.7.6 - Unauthenticated Login Attempt Limit Bypass via IP Spoofing Medium 6.5 4.7.7
2026-10-15 WPSEC-2026-0981 Nexter Extension – Site Enhancements Toolkit <= 4.7.6 - Authenticated (Author+) Arbitrary File Upload via Custom Font Upload High 7.5 4.7.7
2026-10-14 WPSEC-2026-0944 Nexter Extension – Site Enhancements Toolkit <= 4.7.11 - Authenticated (Subscriber+) Privilege Escalation via View Admin As Role Switcher High 7.5 4.7.12

License: CC BY 4.0