| CVE-2026-107645 |
The Blocksy Companion plugin for WordPress is vulnerable to privilege escalation in versions up to, and including,…
|
9.1
Critique
|
10 oct. 2026 |
| CVE-2026-18488 |
The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'tagName' Block Attribute…
|
6.4
Moyenne
|
1 sept. 2026 |
| CVE-2026-15158 |
The Blocksy Companion plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and…
|
9.8
Critique
|
9 juil. 2026 |
| CVE-2026-12430 |
The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all…
|
4.4
Moyenne
|
19 juin 2026 |
| CVE-2025-12846 |
The Blocksy Companion plugin for WordPress is vulnerable to authenticated arbitrary file upload in all versions up to,…
|
8.8
Élevée
|
11 nov. 2025 |
| CVE-2025-12475 |
The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's…
|
6.4
Moyenne
|
30 oct. 2025 |
| CVE-2025-9565 |
The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's…
|
6.4
Moyenne
|
17 sept. 2025 |
| CVE-2022-4974 |
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request…
|
6.3
Moyenne
|
16 oct. 2024 |
| CVE-2024-4487 |
The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG uploads in versions up…
|
6.4
Moyenne
|
11 mai 2024 |
| CVE-2024-2392 |
The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Newsletter…
|
6.4
Moyenne
|
22 mars 2024 |