Skip to content
OpenAdvisories

Vendor

Creative Themes

11 known vulnerabilities.

Products

Blocksy Companion 6 Blocksy Companion Pro 5
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-58480 Public exploit

    Blocksy Companion Pro < 2.1.47 Unauthenticated File Upload via save_attachments

    Blocksy Companion Pro plugin for WordPress before 2.1.47 contains an unauthenticated arbitrary file upload vulnerability that allows attackers to upload executable files by bypassing extension validation in the save_attachments function exposed through the Ad…

    Creative Themes Blocksy Companion Web / CMS
  • Critical 10.0
    CVE-2026-57624

    WordPress Blocksy Companion Pro plugin <= 2.1.46 - Remote Code Execution (RCE) vulnerability

    Unauthenticated Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.46 versions.

    Creative Themes Blocksy Companion Pro
  • Critical 9.9
    CVE-2026-40783

    WordPress Blocksy Companion Pro plugin <= 2.1.37 - Remote Code Execution (RCE) vulnerability

    Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.37 versions.

    Creative Themes Blocksy Companion Pro
  • Critical 9.3
    CVE-2026-39596

    WordPress Blocksy Companion Pro plugin < 2.1.29 - SQL Injection vulnerability

    Unauthenticated SQL Injection in Blocksy Companion Pro < 2.1.29 versions.

    Creative Themes Blocksy Companion Pro