| CVE-2026-8365 |
The Blocksy theme for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution via the…
|
8.8
Élevée
|
9 juin 2026 |
| CVE-2026-2583 |
The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the `blocksy_meta` metadata fields in…
|
6.4
Moyenne
|
2 mars 2026 |
| CVE-2025-55713 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in creativethemeshq…
|
5.9
Moyenne
|
14 août 2025 |
| CVE-2025-47465 |
Missing Authorization vulnerability in creativethemeshq Blocksy blocksy allows Exploiting Incorrectly Configured…
|
4.9
Moyenne
|
7 mai 2025 |
| CVE-2024-37469 |
Cross-Site Request Forgery (CSRF) vulnerability in creativethemeshq Blocksy blocksy allows Cross Site Request…
|
5.4
Moyenne
|
2 janv. 2025 |
| CVE-2024-11420 |
The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the Contact Info Block link parameter…
|
6.4
Moyenne
|
5 déc. 2024 |
| CVE-2024-5439 |
The Blocksy theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the custom_url parameter in all…
|
6.4
Moyenne
|
5 juin 2024 |
| CVE-2024-4943 |
The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘has_field_link_rel’ parameter in…
|
6.4
Moyenne
|
21 mai 2024 |
| CVE-2024-4158 |
The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tagName’ parameter in versions…
|
6.4
Moyenne
|
9 mai 2024 |
| CVE-2024-3747 |
The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the className parameter in the About Me…
|
6.4
Moyenne
|
2 mai 2024 |
| CVE-2024-32961 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in creativethemeshq…
|
6.5
Moyenne
|
25 avr. 2024 |
| CVE-2024-31382 |
Cross-Site Request Forgery (CSRF) vulnerability in creativethemeshq Blocksy blocksy.This issue affects Blocksy: from n/a…
|
4.3
Moyenne
|
15 avr. 2024 |
| CVE-2024-1767 |
The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's blocks in all versions…
|
6.4
Moyenne
|
9 mars 2024 |
| CVE-2024-24871 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in creativethemeshq…
|
6.5
Moyenne
|
8 févr. 2024 |