Skip to contentCreativethemeshq Blocksy Companion vulnerabilities
- creative themes blocksy companionWordPress Blocksy Companion plugin <= 2.1.60 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-654446.5 Medium
- creativethemeshq blocksy companionBlocksy Companion <= 2.1.58 - Unauthenticated Privilege Escalation to 'role' ParameterCVE-2026-1076459.1 Critical
- creative themes blocksy companionWordPress Blocksy Companion plugin <= 2.1.55 - Broken Access Control vulnerabilityCVE-2026-972476.5 Medium
- creativethemeshq blocksy companionBlocksy Companion <= 2.1.51 - Authenticated (Author+) Stored Cross-Site Scripting via 'tagName' Block Attribute (blocksy/dynamic-data)CVE-2026-184886.4 Medium
- creativethemeshq blocksy companionBlocksy Companion <= 2.1.46 - Unauthenticated Arbitrary File Upload via 'blc-review-images[]' ParameterCVE-2026-151589.8 Critical
- creative themes blocksy companionBlocksy Companion Pro < 2.1.47 Unauthenticated File Upload via save_attachmentsCVE-2026-58480Public exploit9.2 Critical
- creativethemeshq blocksy companionBlocksy Companion <= 2.1.45 - Authenticated (Editor+) Stored Cross-Site Scripting via 'product_description' ParameterCVE-2026-124304.4 Medium
- creativethemeshq blocksy companionBlocksy Companion <= 2.1.19 - Authenticated (Author+) Arbitrary File Upload via SVG Upload BypassCVE-2025-128468.8 High
- creativethemeshq blocksy companionBlocksy Companion <= 2.1.14 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-124756.4 Medium
- creativethemeshq blocksy companionBlocksy Companion <= 2.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via blocksy_newsletter_subscribe ShortcodeCVE-2025-95656.4 Medium
- 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 moreFreemius SDK <= 2.4.2 - Missing Authorization ChecksCVE-2022-49746.3 Medium
- creative themes blocksy companionWordPress Blocksy Companion plugin <= 2.0.42 - Server Side Request Forgery (SSRF) vulnerabilityCVE-2024-356334.4 Medium
- creativethemes blocksy companionBlocksy Companion <= 2.0.45 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG UploadsCVE-2024-44876.4 Medium
- creativethemes blocksy companionWordPress Blocksy Companion plugin <= 2.0.28 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-319325.4 Medium
- creativethemes blocksy companionBlocksy Companion <= 2.0.31 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-23926.4 Medium
- creativethemes blocksy companionBlocksy Companion < 1.8.82 - Subscriber+ Draft Post AccessCVE-2023-19114.3 Medium
- creativethemes blocksy companionWordPress Blocksy Companion Plugin <= 1.8.67 is vulnerable to Cross Site Scripting (XSS)CVE-2023-238985.5 Medium