Blocksy Companion
Creative Themes
Developer
2.1.60
Latest version
300,000
Installations
No date
Last updated
Vulnerability history
0 present
17 patched
7 Mitigation rules
- Unauthenticated Privilege Escalation to 'role' Parameter vulnerability<= 2.1.587 days ago
- Broken Access Control vulnerability<= 2.1.5524/09/2026
- Authenticated (Author+) Stored Cross-Site Scripting via 'tagName' Block Attribute (blocksy/dynamic-data) vulnerability<= 2.1.5131/08/2026
- Unauthenticated Arbitrary File Upload vulnerability<= 2.1.4602/07/2026
- Authenticated (Editor+) Stored Cross-Site Scripting vulnerability<= 2.1.4518/06/2026
- Authenticated (Author+) Arbitrary File Upload via SVG Upload Bypass vulnerability<= 2.1.1911/11/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 2.1.1406/10/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via blocksy_newsletter_subscribe Shortcode vulnerability<= 2.1.1016/09/2025
- Server Side Request Forgery (SSRF) vulnerability<= 2.0.4230/05/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via SVG Uploads vulnerability<= 2.0.4513/05/2024
- Cross Site Request Forgery (CSRF) vulnerability<= 2.0.2810/04/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 2.0.3121/03/2024
- Reflected Cross Site Scripting (XSS) vulnerability<= 1.8.4619/07/2023
- Subscriber+ Draft Post Access vulnerability< 1.8.8217/04/2023
- Cross Site Scripting (XSS) vulnerability<= 1.8.6727/01/2023
- Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability< 1.8.2028/02/2022
- Sensitive Information Disclosure vulnerability< 1.8.2028/02/2022