Advisories · Technology

Creative Themes Blocksy Companion.

Every CVE that names Creative Themes Blocksy Companion among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-65444 CVE record

CVSS 6.5 Medium

WordPress Blocksy Companion plugin <= 2.1.60 - Cross Site Scripting (XSS) vulnerability
- Creative Themes Blocksy Companion
- Cross-site scripting (XSS)
Not analysed yet 30 Oct 2026
CVE-2026-97247 CVE record

CVSS 6.5 Medium

WordPress Blocksy Companion plugin <= 2.1.55 - Broken Access Control vulnerability
- Creative Themes Blocksy Companion
- Broken access control
Not analysed yet 30 Sept 2026
CVE-2026-58480 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

Blocksy Companion Pro < 2.1.47 Unauthenticated File Upload via save_attachments
- Creative Themes Blocksy Companion
- Unrestricted file upload
Not analysed yet 8 Jul 2026
CVE-2024-35633 CVE record

CVSS 4.4 Medium

WordPress Blocksy Companion plugin <= 2.0.42 - Server Side Request Forgery (SSRF) vulnerability
- Creative Themes Blocksy Companion
- Server-side request forgery (SSRF)
Not analysed yet 3 Jun 2024