Advisories · Technology

creativethemeshq Blocksy.

Every CVE that names creativethemeshq Blocksy among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-8365 CVE record

CVSS 8.8 High

Blocksy <= 2.1.41 - Authenticated (Contributor+) PHP Object Injection via Deserialization of Untrusted Data via 'blocksy_meta' REST API Field
- creativethemeshq Blocksy
- Insecure deserialization
Not analysed yet 9 Jun 2026
CVE-2026-2583 CVE record

CVSS 6.4 Medium

Blocksy <= 2.1.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via `blocksy_meta` Fields
- creativethemeshq Blocksy
- Cross-site scripting (XSS)
Not analysed yet 2 Mar 2026
CVE-2025-55713 CVE record

CVSS 5.9 Medium

WordPress Blocksy Theme <= 2.1.6 - Cross Site Scripting (XSS) Vulnerability
- creativethemeshq Blocksy
- Cross-site scripting (XSS)
Not analysed yet 14 Aug 2025
CVE-2025-47465 CVE record

CVSS 4.9 Medium

WordPress Blocksy theme <= 2.0.97 - Broken Access Control Vulnerability
- creativethemeshq Blocksy
- Broken access control
Not analysed yet 7 May 2025
CVE-2024-37469 CVE record

CVSS 5.4 Medium

WordPress Blocksy theme <= 1.9.5 - Cross Site Request Forgery (CSRF) vulnerability
- creativethemeshq Blocksy
- Cross-site request forgery (CSRF)
Not analysed yet 2 Jan 2025
CVE-2024-11420 CVE record

CVSS 6.4 Medium

Blocksy <= 2.0.77 - Authenticated (Contributor+) Stored Cross-Site Scripting
- creativethemeshq Blocksy
- Cross-site scripting (XSS)
Not analysed yet 5 Dec 2024
CVE-2024-5439 CVE record

CVSS 6.4 Medium

Blocksy <= 2.0.50 - Authenticated (Contributor+) Stored Cross-Site Scripting
- creativethemeshq Blocksy
- CWE-20
Not analysed yet 5 Jun 2024
CVE-2024-4943 CVE record

CVSS 6.4 Medium

Blocksy <= 2.0.46 - Authenticated (Contributor+) Stored Cross-Site Scripting
- creativethemeshq Blocksy
- Cross-site scripting (XSS)
Not analysed yet 21 May 2024
CVE-2024-4158 CVE record

CVSS 6.4 Medium

Blocksy <= 2.0.42 - Authenticated (Contributor+) Stored Cross-Site Scripting
- creativethemeshq Blocksy
- Cross-site scripting (XSS)
Not analysed yet 9 May 2024
CVE-2024-3747 CVE record

CVSS 6.4 Medium

Blocksy <= 2.0.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via About Me block
- creativethemeshq Blocksy
- CWE-20
Not analysed yet 2 May 2024
CVE-2024-32961 CVE record

CVSS 6.5 Medium

WordPress Blocksy theme <= 2.0.33 - Cross Site Scripting (XSS) vulnerability
- creativethemeshq Blocksy
- Cross-site scripting (XSS)
Not analysed yet 25 Apr 2024
CVE-2024-31382 CVE record

CVSS 4.3 Medium

WordPress Blocksy theme <= 2.0.22 - Cross Site Request Forgery (CSRF) vulnerability
- creativethemeshq Blocksy
- Cross-site request forgery (CSRF)
Not analysed yet 15 Apr 2024
CVE-2024-1767 CVE record

CVSS 6.4 Medium

Blocksy <= 2.0.26 - Authenticated (Contributor+) Stored Cross-Site Scripting
- creativethemeshq Blocksy
- Cross-site scripting (XSS)
Not analysed yet 9 Mar 2024
CVE-2024-24871 CVE record

CVSS 6.5 Medium

WordPress Blocksy theme <= 2.0.19 - Cross Site Scripting (XSS) vulnerability
- creativethemeshq Blocksy
- Cross-site scripting (XSS)
Not analysed yet 8 Feb 2024