A vulnerability was found in the POSIMYTH Nexter Blocks the-plus-addons-for-block-editor plugin, affecting versions from n/a through <= 4.7.0. This issue, CVE-2026-39516, is classified as Exposure of Sensitive System Information to an Unauthorized Control Sphere, allowing Retrieve Embedded Sensitive Data. The Common Vulnerability Scoring System (CVSS) score for this vulnerability is 5.3, indicating a MEDI [truncated]
A Cross-site Scripting vulnerability in POSIMYTH UiChemy uichemy allows Stored XSS, affecting versions from n/a through <= 4.4.2. The CVE record was published on 2026-01-06T17:15:48.790Z and has not been modified since then. The NVD entry is currently Deferred. This vulnerability allows attackers to inject malicious scripts, potentially leading to unauthorized script injection. Defenders should verify exp [truncated]
