agentprime: creativethemeshq-blocksy-companionEvery new CVE for creativethemeshq-blocksy-companion.https://agentprime.io/CVE-2026-107645: Blocksy Companion <= 2.1.58 - Unauthenticated Privilege Escalation to 'role' Parameterhttps://agentprime.io/advisories/CVE-2026-107645/https://agentprime.io/advisories/CVE-2026-107645/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 03:26:44 GMTCVEcriticalCVE-2026-18488: Blocksy Companion <= 2.1.51 - Authenticated (Author+) Stored Cross-Site Scripting via 'tagName' Block Attribute (blocksy/dynamic-data)https://agentprime.io/advisories/CVE-2026-18488/https://agentprime.io/advisories/CVE-2026-18488/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Sep 2026 05:30:42 GMTCVECVE-2026-15158: Blocksy Companion <= 2.1.46 - Unauthenticated Arbitrary File Upload via 'blc-review-images[]' Parameterhttps://agentprime.io/advisories/CVE-2026-15158/https://agentprime.io/advisories/CVE-2026-15158/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jul 2026 08:31:35 GMTCVEcriticalCVE-2026-12430: Blocksy Companion <= 2.1.45 - Authenticated (Editor+) Stored Cross-Site Scripting via 'product_description' Parameterhttps://agentprime.io/advisories/CVE-2026-12430/https://agentprime.io/advisories/CVE-2026-12430/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Jun 2026 04:31:35 GMTCVECVE-2025-12846: Blocksy Companion <= 2.1.19 - Authenticated (Author+) Arbitrary File Upload via SVG Upload Bypasshttps://agentprime.io/advisories/CVE-2025-12846/https://agentprime.io/advisories/CVE-2025-12846/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Nov 2025 11:03:46 GMTCVECVE-2025-12475: Blocksy Companion <= 2.1.14 - Authenticated (Contributor+) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2025-12475/https://agentprime.io/advisories/CVE-2025-12475/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Oct 2025 04:26:01 GMTCVECVE-2025-9565: Blocksy Companion <= 2.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via blocksy_newsletter_subscribe Shortcodehttps://agentprime.io/advisories/CVE-2025-9565/https://agentprime.io/advisories/CVE-2025-9565/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 17 Sep 2025 06:17:48 GMTCVECVE-2024-4487: Blocksy Companion <= 2.0.45 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG Uploadshttps://agentprime.io/advisories/CVE-2024-4487/https://agentprime.io/advisories/CVE-2024-4487/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 11 May 2024 07:40:48 GMTCVECVE-2024-2392: Blocksy Companion <= 2.0.31 - Authenticated (Contributor+) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-2392/https://agentprime.io/advisories/CVE-2024-2392/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 22 Mar 2024 01:59:59 GMTCVE