Description
Unauthenticated SQL Injection in Blocksy Companion Pro < 2.1.29 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Creative Themes | Blocksy Companion Pro | < 2.1.29 | 2.1.29 |
Critical · 9.3
CVE-2026-39596
EUVD-2026-37589GHSA-r9hh-736v-qcp4
WordPress Blocksy Companion Pro plugin < 2.1.29 - SQL Injection vulnerability
Published Jun 17, 2026 · Updated Jun 17, 2026 · Assigned by Patchstack