Medium · 5.4 CVE-2024-31932 EUVD-2024-29790GHSA-4hm5-5hxv-2486

WordPress Blocksy Companion plugin <= 2.0.28 - Cross Site Request Forgery (CSRF) vulnerability

Published Apr 11, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in CreativeThemes Blocksy Companion.This issue affects Blocksy Companion: from n/a through 2.0.28.

Vendor	Product	Affected	Fixed
CreativeThemes	Blocksy Companion	≤ 2.0.28	—