Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1325 CNY

100%
Buy Us a Coffee

Blocksy Companion — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in Blocksy Companion, with AI-generated Chinese analysis, references, and POCs.

Vendor: CreativeThemes

CVE IDTitleCVSSSeverityPublished
CVE-2026-12430 Blocksy Companion <= 2.1.45 - Authenticated (Editor+) Stored Cross-Site Scripting via 'product_description' Parameter CWE-79 4.4 Medium2026-06-19
CVE-2025-12846 Blocksy Companion <= 2.1.19 - Authenticated (Author+) Arbitrary File Upload via SVG Upload Bypass CWE-434 8.8 High2025-11-11
CVE-2025-12475 Blocksy Companion <= 2.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium2025-10-30
CVE-2025-9565 Blocksy Companion <= 2.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via blocksy_newsletter_subscribe Shortcode CWE-79 6.4 Medium2025-09-17
CVE-2024-35633 WordPress Blocksy Companion plugin <= 2.0.42 - Server Side Request Forgery (SSRF) vulnerability CWE-918 4.4 Medium2024-06-03
CVE-2024-4487 Blocksy Companion <= 2.0.45 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG Uploads CWE-79 6.4 Medium2024-05-11
CVE-2024-31932 WordPress Blocksy Companion plugin <= 2.0.28 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 5.4 Medium2024-04-11
CVE-2024-2392 Blocksy Companion <= 2.0.31 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium2024-03-22
CVE-2023-1911 Blocksy Companion < 1.8.82 - Subscriber+ Draft Post Access 4.3 -2023-05-02
CVE-2023-23898 WordPress Blocksy Companion Plugin <= 1.8.67 is vulnerable to Cross Site Scripting (XSS) CWE-79 5.5 Medium2023-04-06

All 10 known CVE vulnerabilities affecting Blocksy Companion with full Chinese analysis, references, and POCs where available.