Blocksy Companion@* Security Vulnerabilities and Issues — Blocksy Companion@* CVE List

Lucene search

CreativethemesBlocksy Companion*

2 matches found

CVE•added 2023/05/02 8:15 a.m.•79 views

CVE-2023-1911

The Blocksy Companion WordPress plugin before 1.8.82 does not ensure that posts to be accessed via a shortcode are already public and can be viewed, allowing any authenticated users, such as subscriber to access draft posts for example

4.3CVSS4.7AI score0.00094EPSS

CVE•added 2023/04/06 11:15 a.m.•35 views

CVE-2023-23898

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeThemes Blocksy Companion plugin

5.5CVSS5.2AI score0.00077EPSS