Creative Themes

Products

ProductCVEsExploitedLatest
Blocksy Companion Pro5–Jul 2, 2026
Blocksy Companion4–Oct 30, 2026

Exploited and recent CVEs

  • CVE-2026-65444 Medium 6.5 WordPress Blocksy Companion plugin <= 2.1.60 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-97247 Medium 6.5 WordPress Blocksy Companion plugin <= 2.1.55 - Broken Access Control vulnerability 0.2%
  • CVE-2026-58480 Critical 9.8 Blocksy Companion Pro < 2.1.47 Unauthenticated File Upload via save_attachments 3.6%
  • CVE-2026-57624 Critical 10.0 WordPress Blocksy Companion Pro plugin <= 2.1.46 - Remote Code Execution (RCE) vulnerability 0.9%
  • CVE-2026-57630 Medium 5.3 WordPress Blocksy Companion Pro plugin <= 2.1.46 - Insecure Direct Object References (IDOR) vulnerability 0.3%
  • CVE-2026-57315 High 8.5 WordPress Blocksy Companion Pro plugin <= 2.1.45 - Remote Code Execution (RCE) vulnerability 0.6%
  • CVE-2026-40783 Critical 9.9 WordPress Blocksy Companion Pro plugin <= 2.1.37 - Remote Code Execution (RCE) vulnerability 0.5%
  • CVE-2026-39596 Critical 9.3 WordPress Blocksy Companion Pro plugin < 2.1.29 - SQL Injection vulnerability 0.4%
  • CVE-2024-35633 Medium 4.4 WordPress Blocksy Companion plugin <= 2.0.42 - Server Side Request Forgery (SSRF) vulnerability 0.3%