Skip to content
Sign in
9.8 Critical

CVE-2026-25429 Deserialization of Untrusted Data vulnerability in wpdive Nexa Blocks nexa-blocks allows Object Injection.This issue…

Description

Deserialization of Untrusted Data vulnerability in wpdive Nexa Blocks nexa-blocks allows Object Injection.This issue affects Nexa Blocks: from n/a through <= 1.1.1.

Affected products and versions

Product Affected versions Fixed in
Nexa Blocks 1.1 earliest → 1.1.1 No fix stated

Other CVEs of Nexa Blocks

The 3 CVEs of Nexa Blocks →
CVE-2025-30952 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdive Nexa Blocks… 6.5 Medium CVE-2025-30976 Server-Side Request Forgery (SSRF) vulnerability in wpdive Nexa Blocks nexa-blocks allows Server Side Request… 4.9 Medium
Track this CVE