Creative Themes

8 CVEs across 2 Creative Themes products. Browse Creative Themes vulnerabilities, severities, and proof-of-concept exploits.

Creative Themes products with known CVEs

ProductCVEs
Blocksy Companion Pro5
Blocksy Companion3
Creative Themes CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-97247Medium6.52026-09-30Unauthenticated Broken Access Control in Blocksy Companion <= 2.1.55 versions.
CVE-2026-58480Critical9.82026-07-08Blocksy Companion Pro plugin for WordPress before 2.1.47 contains an unauthenticated arbitrary file upload vulnerability that allows attackers to upload execut…
CVE-2026-57624Critical10.02026-07-02Unauthenticated Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.46 versions.
CVE-2026-57630Medium5.32026-06-26Unauthenticated Insecure Direct Object References (IDOR) in Blocksy Companion Pro <= 2.1.46 versions.
CVE-2026-57315High8.52026-06-26Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.45 versions.
CVE-2026-40783Critical9.92026-06-17Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.37 versions.
CVE-2026-39596Critical9.32026-06-17Unauthenticated SQL Injection in Blocksy Companion Pro < 2.1.29 versions.
CVE-2024-35633Medium4.42024-06-03Server-Side Request Forgery (SSRF) vulnerability in Creative Themes Blocksy Companion blocksy-companion.This issue affects Blocksy Companion: from n/a through…