Blocksy Companion

Explore Blocksy Companion vulnerabilities across all versions. Currently tracking 12 known vulnerabilities, including severity, impact, and patch status.

01234567891011.04.2019Today04.03.20226.3Freemius SDK <= 2.4.2 - Missing Authorization Checks CVSS 6.3 · 04.03.202227.01.20236.4Blocksy Companion <= 1.8.67 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 27.01.202310.04.20234.3Blocksy Companion <= 1.8.81 - Authenticated(Subscriber+) Sensitive Information Exposure via blocksy_posts shortcode CVSS 4.3 · 10.04.202321.03.20246.4Blocksy Companion <= 2.0.31 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 21.03.202410.04.20245.3Blocksy Companion <= 2.0.28 - Cross-Site Request Forgery CVSS 5.3 · 10.04.202410.05.20246.4Blocksy Companion <= 2.0.45 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG Uploads CVSS 6.4 · 10.05.202430.05.20245.5Blocksy Companion <= 2.0.42 - Authenticated (Admin+) Server-Side Request Forgery CVSS 5.5 · 30.05.202416.09.20256.4Blocksy Companion <= 2.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via blocksy_newsletter_subscribe Shortcode CVSS 6.4 · 16.09.202506.10.20256.4Blocksy Companion <= 2.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 06.10.202510.11.20258.8Blocksy Companion <= 2.1.19 - Authenticated (Author+) Arbitrary File Upload via SVG Upload Bypass CVSS 8.8 · 10.11.202518.06.20264.4Blocksy Companion <= 2.1.45 - Authenticated (Editor+) Stored Cross-Site Scripting via 'product_description' Parameter CVSS 4.4 · 18.06.202601.07.20269.8Blocksy Companion <= 2.1.46 - Unauthenticated Arbitrary File Upload via 'blc-review-images[]' Parameter CVSS 9.8 · 01.07.2026

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

12

Get automatic notifications for all Blocksy Companion vulnerabilities before they are exploited.

Vulnerability Records

12 records
2026-07-01 13:28CVE-2026-15158
9.8
Critical
Nguyen Ba KhanhYes
2026-06-18 15:44CVE-2026-12430
4.4
Medium
Pasindu Dilshan (K4PXD)Yes
2025-11-10 22:26CVE-2025-12846
8.8
High
shark3yYes
2025-10-06 00:00CVE-2025-12475
6.4
Medium
Rafshanzani SuhadaYes
2025-09-16 17:33CVE-2025-9565
6.4
Medium
Muhammad Yudha - DJYes
2024-05-30 00:00CVE-2024-35633
5.5
Medium
Yuchen JiYes
2024-05-10 00:00CVE-2024-4487
6.4
Medium
wesley (wcraft)Yes
2024-04-10 00:00CVE-2024-31932
5.3
Medium
R3N0Yes
2024-03-21 00:00CVE-2024-2392
6.4
Medium
Ngô Thiên An (ancorn_)Yes
2023-04-10 00:00CVE-2023-1911
4.3
Medium
Erwan LRYes
Showing 1–10 of 12 reports
Blocksy Companion banner
Latestv2.1.50

Blocksy Companion

Creative Themes

Author

Creative Themes

4.7(93)
94/100
Last Updated
2026-07-23 (7d ago)
Active Installs
300,000+
Downloads
17,561,827
Requires WP
6.7+
Requires PHP
7.0+
Tested up to
WP 7.0.2
Created
2019-04-11 (7y ago)

Blocksy Companion is the official plugin that extends the power of the Blocksy WordPress theme. It unlocks extra features, premium integrations, and beautifully designed starter sites that help you build fast, modern, and fully customizable websites with ease. With Blocksy Companion, you get access to a growing library of starter sites, advanced WooCommerce enhancements, and exclusive extensions that take your website to the next level. Whether you’re creating a personal blog, a business website, or a professional online store, this plugin provides the tools you need to design stunning layouts and improve your workflow. Built for performance and flexibility, Blocksy Companion integrates seamlessly with popular WordPress plugins like WooCommerce, Elementor, Brizy, Beaver Builder, WPML and ACF. It gives you powerful customization options, dynamic features, and optimized code — all without slowing down your site. Key features: Starter Sites Library – import professionally designed demo sites with one click and kickstart your project. Extra Extensions – unlock advanced features such as Cookies Consent, Custom Code Snippets, Trending Posts, and more. WooCommerce Enhancements – boost your online store with additional customization options and modern layouts. Page Builder Ready – works perfectly with Elementor, Brizy, Beaver Builder, and other popular WordPress page builders. Advanced Integrations – seamless compatibility with Mailchimp, Rank Math, WPML, and other top WordPress plugins. Performance Focused – lightweight, fast, and optimized for speed to ensure a smooth user experience. Developer Friendly – clean, extendable codebase that makes customization and scaling easy. Minimum Requirements WordPress 5.0 or greater PHP version 7.0 or greater

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C