Advisories · Technology

Creative Themes Blocksy Companion Pro.

Every CVE that names Creative Themes Blocksy Companion Pro among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-57624 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

WordPress Blocksy Companion Pro plugin <= 2.1.46 - Remote Code Execution (RCE) vulnerability
- Creative Themes Blocksy Companion Pro
- Code injection
Not analysed yet 2 Jul 2026
CVE-2026-57630 CVE record

CVSS 5.3 Medium

WordPress Blocksy Companion Pro plugin <= 2.1.46 - Insecure Direct Object References (IDOR) vulnerability
- Creative Themes Blocksy Companion Pro
- Broken access control
Not analysed yet 26 Jun 2026
CVE-2026-57315 CVE record

CVSS 8.5 High

WordPress Blocksy Companion Pro plugin <= 2.1.45 - Remote Code Execution (RCE) vulnerability
- Creative Themes Blocksy Companion Pro
- Code injection
Not analysed yet 26 Jun 2026
CVE-2026-40783 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

WordPress Blocksy Companion Pro plugin <= 2.1.37 - Remote Code Execution (RCE) vulnerability
- Creative Themes Blocksy Companion Pro
- Code injection
Not analysed yet 17 Jun 2026
CVE-2026-39596 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress Blocksy Companion Pro plugin < 2.1.29 - SQL Injection vulnerability
- Creative Themes Blocksy Companion Pro
- SQL injection
Not analysed yet 17 Jun 2026