CVE-2024-37469

Cross-Site Request Forgery CSRF vulnerability in creativethemeshq Blocksy blocksy allows Cross Site Request Forgery.This issue affects Blocksy: from n/a through = 2.0.22...

CVE-2024-31382

Cross-Site Request Forgery CSRF vulnerability in creativethemeshq Blocksy blocksy.This issue affects Blocksy: from n/a through = 2.0.22...

CVE-2024-4487

The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG uploads in versions up to, and including, 2.0.45 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and...

CVE-2023-23898

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in CreativeThemes Blocksy Companion plugin = 1.8.67 versions...

CVE-2023-1911

The Blocksy Companion WordPress plugin before 1.8.82 does not ensure that posts to be accessed via a shortcode are already public and can be viewed, allowing any authenticated users, such as subscriber to access draft posts for example...

CVE-2025-47465

Missing Authorization vulnerability in creativethemeshq Blocksy blocksy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Blocksy: from n/a through = 2.0.97...

CVE-2025-47465

Missing Authorization vulnerability in creativethemeshq Blocksy blocksy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Blocksy: from n/a through = 2.0.97...

CVE-2025-47465 WordPress Blocksy theme <= 2.0.97 - Broken Access Control Vulnerability

Missing Authorization vulnerability in creativethemeshq Blocksy blocksy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Blocksy: from n/a through = 2.0.97...

CVE-2025-47465

CVE-2025-47465 concerns the Blocksy WordPress theme (Creative Themes). A Missing Authorization vulnerability exists in Blocksy versions up to and including 2.0.97, allowing exploitation of incorrectly configured access control. Reported CVSS 3.1/3.1 metrics indicate a medium base score (4.9) with...

CVE-2025-47465 WordPress Blocksy <= 2.0.97 - Broken Access Control Vulnerability

Missing Authorization vulnerability in CreativeThemes Blocksy allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Blocksy: from n/a through 2.0.97...

WordPress Blocksy theme <= 2.0.97 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by savphill in WordPress Theme Blocksy versions = 2.0.97...

CVE-2025-47465: Missing Authorization

Missing Authorization vulnerability in creativethemeshq Blocksy blocksy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Blocksy: from n/a through = 2.0.97...

WordPress Blocksy Theme <= 2.0.97 is vulnerable to Broken Access Control

Software Blocksy Type Theme Vulnerable versions = 2.0.97 Fixed in 2.0.98 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2025-47465 Patch priority Low CVSS severity Low 4.9 Developer Creative Themes PSID 62c34d0d694c Credits savphill Required privilege...

PT-2025-20096 · Blocksy · Blocksy

Name of the Vulnerable Software and Affected Versions: Blocksy versions 2.0.97 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Blocksy versions 2.0.97 and...

WordPress plugin Blocksy 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2024-37469

Cross-Site Request Forgery CSRF vulnerability in creativethemeshq Blocksy blocksy allows Cross Site Request Forgery.This issue affects Blocksy: from n/a through = 2.0.22...

CVE-2024-37469

Cross-Site Request Forgery CSRF vulnerability in CreativeThemes Blocksy allows Cross Site Request Forgery.This issue affects Blocksy: from n/a through 2.0.22...

CVE-2024-37469 WordPress Blocksy theme <= 1.9.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in creativethemeshq Blocksy blocksy allows Cross Site Request Forgery.This issue affects Blocksy: from n/a through = 2.0.22...

CVE-2024-37469 WordPress Blocksy theme <= 1.9.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in creativethemeshq Blocksy blocksy allows Cross Site Request Forgery.This issue affects Blocksy: from n/a through = 2.0.22...

CVE-2024-37469

CVE-2024-37469 is a CSRF vulnerability in the WordPress Blocksy theme (vulnerable up to 2.0.22). The root cause is a CSRF oversight in Blocksy that allows unauthorized actions to be performed remotely. Affected versions include 2.0.22 and earlier; the issue is fixed in 2.0.23. Public sources char...