Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Deserialization of Untrusted Data vulnerability in wpdive Nexa Blocks nexa-blocks allows Object Injection.This issue affects Nexa Blocks: from n/a through <= 1.1.1.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-03-29 | 2 | Disclosure2 |
| 2026-04-09 | 1 | PoC1 |
CVE-2026-25429 Deserialization of Untrusted Data vulnerability in wpdive Nexa Blocks nexa-blocks allows Object Injection.This issue affects Nexa Blocks: from n/a through <= 1.1.1. https://www.cve.org/CVERecord?id=CVE-2026-25429
Post summary
The text announces CVE‑2026‑25429, describing its deserialization flaw and affected versions, but does not provide PoC, exploit code, active exploitation evidence, patch details, or debunking claims.
https://atomicedge.io/cve-proof/cve-2026-25429-nexa-blocks-version-1-1-1-high-vulnerability-proof-of-concept CVE-2026-25429 #WordPress plugin #vulnerability nexa-blocks #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge
Post summary
The post links to a proof‑of‑concept for CVE‑2026‑25429 affecting the Nexa Blocks WordPress plugin, indicating a high‑severity issue but providing no further technical, exploitation, or mitigation details.
🚨*CVE* CVE-2026-25429 Deserialization of Untrusted Data vulnerability in wpdive Nexa Blocks nexa-blocks allows Object Injection.This issue affects Nexa Blocks: from n/a through <= 1.1.1. https://www.cve.org/CVERecord?id=CVE-2026-25429 ----- Traducción: CVE-2026-25429 Deseria… http://infoflow.cloud`
Post summary
The post announces CVE-2026-25429, a deserialization vulnerability in Nexa Blocks that allows object injection, affecting versions up to 1.1.1.