Creativethemes Blocksy Companion — known CVE vulnerabilities

Every CVE whose affected-product data names Creativethemes Blocksy Companion, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2024-2392 — CVSS 6.4 (medium): The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Newsletter widget in all versions…
• CVE-2024-4487 — CVSS 6.4 (medium): The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG uploads in versions up to, and including…
• CVE-2023-23898 — CVSS 5.5 (medium): Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeThemes Blocksy Companion plugin <= 1.8.67 versions.
• CVE-2024-31932 — CVSS 5.4 (medium): Cross-Site Request Forgery (CSRF) vulnerability in CreativeThemes Blocksy Companion.This issue affects Blocksy Companion: from n/a through…
• CVE-2024-35633 — CVSS 4.4 (medium): Server-Side Request Forgery (SSRF) vulnerability in Creative Themes Blocksy Companion blocksy-companion.This issue affects Blocksy…
• CVE-2023-1911 — CVSS 4.3 (medium): The Blocksy Companion WordPress plugin before 1.8.82 does not ensure that posts to be accessed via a shortcode are already public and can…