CVE-2026-97247 Unauthenticated Broken Access Control in Blocksy Companion <= 2.1.55 versions

Description

Unauthenticated Broken Access Control in Blocksy Companion <= 2.1.55 versions.

Affected products and versions

Product	Affected versions	Fixed in
Blocksy Companion 2.1	earliest → 2.1.55	No fix stated

Other CVEs of Blocksy Companion

The 4 CVEs of Blocksy Companion →

CVE-2026-65444 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Creative Themes… 6.5 Medium CVE-2026-58480 Blocksy Companion Pro plugin for WordPress before 2.1.47 contains an unauthenticated arbitrary file upload vulnerability… 9.2 Critical CVE-2024-35633 Server-Side Request Forgery (SSRF) vulnerability in Creative Themes Blocksy Companion blocksy-companion.This issue… 4.4 Medium