| CVE-2026-8365 |
The Blocksy theme for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution via the…
|
8.8
High
|
Jun 9, 2026 |
| CVE-2026-2583 |
The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the `blocksy_meta` metadata fields in…
|
6.4
Medium
|
Mar 2, 2026 |
| CVE-2025-55713 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in creativethemeshq…
|
5.9
Medium
|
Aug 14, 2025 |
| CVE-2025-47465 |
Missing Authorization vulnerability in creativethemeshq Blocksy blocksy allows Exploiting Incorrectly Configured…
|
4.9
Medium
|
May 7, 2025 |
| CVE-2024-37469 |
Cross-Site Request Forgery (CSRF) vulnerability in creativethemeshq Blocksy blocksy allows Cross Site Request…
|
5.4
Medium
|
Jan 2, 2025 |
| CVE-2024-11420 |
The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the Contact Info Block link parameter…
|
6.4
Medium
|
Dec 5, 2024 |
| CVE-2024-5439 |
The Blocksy theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the custom_url parameter in all…
|
6.4
Medium
|
Jun 5, 2024 |
| CVE-2024-4943 |
The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘has_field_link_rel’ parameter in…
|
6.4
Medium
|
May 21, 2024 |
| CVE-2024-4158 |
The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tagName’ parameter in versions…
|
6.4
Medium
|
May 9, 2024 |
| CVE-2024-3747 |
The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the className parameter in the About Me…
|
6.4
Medium
|
May 2, 2024 |
| CVE-2024-32961 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in creativethemeshq…
|
6.5
Medium
|
Apr 25, 2024 |
| CVE-2024-31382 |
Cross-Site Request Forgery (CSRF) vulnerability in creativethemeshq Blocksy blocksy.This issue affects Blocksy: from n/a…
|
4.3
Medium
|
Apr 15, 2024 |
| CVE-2024-1767 |
The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's blocks in all versions…
|
6.4
Medium
|
Mar 9, 2024 |
| CVE-2024-24871 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in creativethemeshq…
|
6.5
Medium
|
Feb 8, 2024 |