Skip to content
Vendors / creativethemeshq / Blocksy
creativethemeshq Blocksy
CVE-2026-8365
High 8.8
Blocksy <= 2.1.41 - Authenticated (Contributor+) PHP Object Injection via Deserialization of Untrusted Data via 'blocksy_meta' REST API Field
1.1%
CVE-2026-2583
Medium 6.4
Blocksy <= 2.1.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via `blocksy_meta` Fields
0.2%
CVE-2025-55713
Medium 5.9
WordPress Blocksy Theme <= 2.1.6 - Cross Site Scripting (XSS) Vulnerability
0.2%
CVE-2025-47465
Medium 4.9
WordPress Blocksy theme <= 2.0.97 - Broken Access Control Vulnerability
0.4%
CVE-2024-37469
Medium 5.4
WordPress Blocksy theme <= 1.9.5 - Cross Site Request Forgery (CSRF) vulnerability
0.2%
CVE-2024-11420
Medium 6.4
Blocksy <= 2.0.77 - Authenticated (Contributor+) Stored Cross-Site Scripting
0.3%
CVE-2024-5439
Medium 6.4
Blocksy <= 2.0.50 - Authenticated (Contributor+) Stored Cross-Site Scripting
0.3%
CVE-2024-4943
Medium 6.4
Blocksy <= 2.0.46 - Authenticated (Contributor+) Stored Cross-Site Scripting
0.3%
CVE-2024-4158
Medium 6.4
Blocksy <= 2.0.42 - Authenticated (Contributor+) Stored Cross-Site Scripting
0.3%
CVE-2024-3747
Medium 6.4
Blocksy <= 2.0.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via About Me block
0.4%
CVE-2024-32961
Medium 6.5
WordPress Blocksy theme <= 2.0.33 - Cross Site Scripting (XSS) vulnerability
0.3%
CVE-2024-31382
Medium 4.3
WordPress Blocksy theme <= 2.0.22 - Cross Site Request Forgery (CSRF) vulnerability
0.2%
CVE-2024-1767
Medium 6.4
Blocksy <= 2.0.26 - Authenticated (Contributor+) Stored Cross-Site Scripting
0.3%
CVE-2024-24871
Medium 6.5
WordPress Blocksy theme <= 2.0.19 - Cross Site Scripting (XSS) vulnerability
0.3%