| CVE-2026-107645 |
The Blocksy Companion plugin for WordPress is vulnerable to privilege escalation in versions up to, and including,…
|
9.1
Critical
|
Oct 10, 2026 |
| CVE-2026-18488 |
The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'tagName' Block Attribute…
|
6.4
Medium
|
Sep 1, 2026 |
| CVE-2026-15158 |
The Blocksy Companion plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and…
|
9.8
Critical
|
Jul 9, 2026 |
| CVE-2026-12430 |
The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all…
|
4.4
Medium
|
Jun 19, 2026 |
| CVE-2025-12846 |
The Blocksy Companion plugin for WordPress is vulnerable to authenticated arbitrary file upload in all versions up to,…
|
8.8
High
|
Nov 11, 2025 |
| CVE-2025-12475 |
The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's…
|
6.4
Medium
|
Oct 30, 2025 |
| CVE-2025-9565 |
The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's…
|
6.4
Medium
|
Sep 17, 2025 |
| CVE-2022-4974 |
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request…
|
6.3
Medium
|
Oct 16, 2024 |
| CVE-2024-4487 |
The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG uploads in versions up…
|
6.4
Medium
|
May 11, 2024 |
| CVE-2024-2392 |
The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Newsletter…
|
6.4
Medium
|
Mar 22, 2024 |