Creative Themes vulnerabilities

Products

• Blocksy Companion Pro 5
• Blocksy Companion 4

Newest

• creative themes blocksy companion WordPress Blocksy Companion plugin <= 2.1.60 - Cross Site Scripting (XSS) vulnerability CVE-2026-65444 6.5 MediumOctober 30, 2026
• creative themes blocksy companion WordPress Blocksy Companion plugin <= 2.1.55 - Broken Access Control vulnerability CVE-2026-97247 6.5 MediumSeptember 30, 2026
• creative themes blocksy companion Blocksy Companion Pro < 2.1.47 Unauthenticated File Upload via save_attachments CVE-2026-58480 Public exploit 9.2 CriticalJuly 8, 2026
• creative themes blocksy companion pro WordPress Blocksy Companion Pro plugin <= 2.1.46 - Remote Code Execution (RCE) vulnerability CVE-2026-57624 10.0 CriticalJuly 2, 2026
• creative themes blocksy companion pro WordPress Blocksy Companion Pro plugin <= 2.1.46 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-57630 5.3 MediumJune 26, 2026
• creative themes blocksy companion pro WordPress Blocksy Companion Pro plugin <= 2.1.45 - Remote Code Execution (RCE) vulnerability CVE-2026-57315 8.5 HighJune 26, 2026
• creative themes blocksy companion pro WordPress Blocksy Companion Pro plugin <= 2.1.37 - Remote Code Execution (RCE) vulnerability CVE-2026-40783 9.9 CriticalJune 17, 2026
• creative themes blocksy companion pro WordPress Blocksy Companion Pro plugin < 2.1.29 - SQL Injection vulnerability CVE-2026-39596 9.3 CriticalJune 17, 2026
• creative themes blocksy companion WordPress Blocksy Companion plugin <= 2.0.42 - Server Side Request Forgery (SSRF) vulnerability CVE-2024-35633 4.4 MediumJune 3, 2024