Creativethemes vulnerabilities

Products

• Blocksy 10
• Blocksy Companion 6
• Blocksy Companion 2

Newest

• creativethemes blocksy WordPress Blocksy theme <= 1.9.5 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-37469 5.4 MediumJanuary 2, 2025
• creativethemes blocksy Blocksy <= 2.0.77 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-11420 6.4 MediumDecember 5, 2024
• creativethemes blocksy Blocksy <= 2.0.50 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-5439 6.4 MediumJune 5, 2024
• creative themes blocksy companion WordPress Blocksy Companion plugin <= 2.0.42 - Server Side Request Forgery (SSRF) vulnerability CVE-2024-35633 4.4 MediumJune 3, 2024
• creativethemes blocksy Blocksy <= 2.0.46 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-4943 6.4 MediumMay 21, 2024
• creativethemes blocksy companion Blocksy Companion <= 2.0.45 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG Uploads CVE-2024-4487 6.4 MediumMay 11, 2024
• creativethemes blocksy Blocksy <= 2.0.42 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-4158 6.4 MediumMay 9, 2024
• creativethemes blocksy Blocksy <= 2.0.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via About Me block CVE-2024-3747 6.4 MediumMay 2, 2024
• creativethemes blocksy WordPress Blocksy theme <= 2.0.33 - Cross Site Scripting (XSS) vulnerability CVE-2024-32961 6.5 MediumApril 25, 2024
• creativethemes blocksy WordPress Blocksy theme <= 2.0.22 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-31382 4.3 MediumApril 15, 2024
• creativethemes blocksy companion WordPress Blocksy Companion plugin <= 2.0.28 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-31932 5.4 MediumApril 11, 2024
• creativethemes blocksy companion Blocksy Companion <= 2.0.31 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-2392 6.4 MediumMarch 22, 2024
• creativethemes blocksy Blocksy <= 2.0.26 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1767 6.4 MediumMarch 9, 2024
• creativethemes blocksy WordPress Blocksy theme <= 2.0.19 - Cross Site Scripting (XSS) vulnerability CVE-2024-24871 6.5 MediumFebruary 8, 2024
• creativethemes blocksy companion Blocksy Companion < 1.8.82 - Subscriber+ Draft Post Access CVE-2023-1911 4.3 MediumMay 2, 2023
• creativethemes blocksy companion WordPress Blocksy Companion Plugin <= 1.8.67 is vulnerable to Cross Site Scripting (XSS) CVE-2023-23898 5.5 MediumApril 6, 2023