Blocksy Companion Pro

Blocksy Companion Pro has 5 disclosed vulnerabilities in the WordSec catalog, all reported in 2026; all 5 are fixed as of October 2026. Their average CVSS score is 7.1, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 2 high. 2026 was the busiest year with 5 disclosures.

The most common weakness is Code Injection, behind 3 of the records (60%). Other recurring categories include Authorization Bypass Through User-Controlled Key, SQL Injection.

Every one of the 5 issues recorded for Blocksy Companion Pro has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, most of them (3) reported by Nguyen Ba Khanh.

Strategic Overview

Avg CVSSHigh

7.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Blocksy Companion Pro vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2026-57624

Blocksy Companion Pro <= 2.1.46 - Unauthenticated Remote Code Execution

Read the full analysis

Vulnerability Records

5 records


2026-06-29 00:00	Blocksy Companion Pro <= 2.1.46 - Unauthenticated Remote Code Execution Blocksy Companion Pro <= 2.1.46	`CVE-2026-57624`	9.8 Critical	Nguyen Ba Khanh	Yes
2026-06-26 00:00	Blocksy Companion Pro <= 2.1.45 - Authenticated (Contributor+) Remote Code Execution Blocksy Companion Pro <= 2.1.45	`CVE-2026-57315`	8.8 High	daroo	Yes
2026-06-26 00:00	Blocksy Companion Pro <= 2.1.46 - Unauthenticated Insecure Direct Object Reference Blocksy Companion Pro <= 2.1.46	`CVE-2026-57630`	5.3 Medium	Austin Ginder	Yes
2026-04-22 00:00	Blocksy Companion Pro <= 2.1.37 - Authenticated (Contributor+) Remote Code Execution Blocksy Companion Pro <= 2.1.37	`CVE-2026-40783`	4.3 Medium	Nguyen Ba Khanh	Yes
2026-04-08 00:00	Blocksy Companion Pro < 2.1.29 - Unauthenticated SQL Injection Blocksy Companion Pro < 2.1.29	`CVE-2026-39596`	7.5 High	Nguyen Ba Khanh	Yes

Showing 1–5 of 5 reports