Skip to content
OpenAdvisories

Vendor

Creative Themes

9 known vulnerabilities.

Products

Blocksy Companion Pro 5 Blocksy Companion 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-58480 Public exploit

    Blocksy Companion Pro < 2.1.47 Unauthenticated File Upload via save_attachments

    Blocksy Companion Pro plugin for WordPress before 2.1.47 contains an unauthenticated arbitrary file upload vulnerability that allows attackers to upload executable files by bypassing extension validation in the save_attachments function exposed through the Ad…

    Creative Themes Blocksy Companion Web / CMS