Blocksy Companion
Creative Themes
Developer
2.1.37
Latest version
300,000
Installations
No date
Last updated
Vulnerability history
0 present
12 patched
5 Mitigation rules
- Authenticated (Author+) Arbitrary File Upload via SVG Upload Bypass vulnerability<= 2.1.1911/11/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 2.1.1406/10/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via blocksy_newsletter_subscribe Shortcode vulnerability<= 2.1.1016/09/2025
- Server Side Request Forgery (SSRF) vulnerability<= 2.0.4230/05/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via SVG Uploads vulnerability<= 2.0.4513/05/2024
- Cross Site Request Forgery (CSRF) vulnerability<= 2.0.2810/04/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 2.0.3121/03/2024
- Reflected Cross Site Scripting (XSS) vulnerability<= 1.8.4619/07/2023
- Subscriber+ Draft Post Access vulnerability< 1.8.8217/04/2023
- Cross Site Scripting (XSS) vulnerability<= 1.8.6727/01/2023
- Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability< 1.8.2028/02/2022
- Sensitive Information Disclosure vulnerability< 1.8.2028/02/2022