Skip to content
OpenAdvisories

Vendor

Creative Themes

9 known vulnerabilities.

Products

Blocksy Companion Pro 5 Blocksy Companion 4
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-65444

    WordPress Blocksy Companion plugin <= 2.1.60 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Creative Themes Blocksy Companion blocksy-companion allows Stored XSS.This issue affects Blocksy Companion: from n/a through 2.1.60.

    Creative Themes Blocksy Companion
  • Medium 6.5
    CVE-2026-97247

    WordPress Blocksy Companion plugin <= 2.1.55 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in Blocksy Companion <= 2.1.55 versions.

    Creative Themes Blocksy Companion
  • Medium 5.3
    CVE-2026-57630

    WordPress Blocksy Companion Pro plugin <= 2.1.46 - Insecure Direct Object References (IDOR) vulnerability

    Unauthenticated Insecure Direct Object References (IDOR) in Blocksy Companion Pro <= 2.1.46 versions.

    Creative Themes Blocksy Companion Pro
  • Medium 4.4
    CVE-2024-35633

    WordPress Blocksy Companion plugin <= 2.0.42 - Server Side Request Forgery (SSRF) vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in Creative Themes Blocksy Companion blocksy-companion.This issue affects Blocksy Companion: from n/a through <= 2.0.42.

    Creative Themes Blocksy Companion