creativethemeshq Blocksy vulnerabilities

CVEs per yearBy the year they were published

1. 20249
2. 20253
3. 20262

Newest CVEs

• CVE-2026-8365

  Blocksy <= 2.1.41 - Authenticated (Contributor+) PHP Object Injection via Deserialization of Untrusted Data via 'blocksy_meta' REST API Field

  creativethemeshq · Blocksy

  High8.8
• CVE-2026-2583

  Blocksy <= 2.1.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via `blocksy_meta` Fields

  creativethemeshq · Blocksy

  Medium6.4
• CVE-2025-55713

  WordPress Blocksy Theme <= 2.1.6 - Cross Site Scripting (XSS) Vulnerability

  creativethemeshq · Blocksy

  Medium5.9
• CVE-2025-47465

  WordPress Blocksy theme <= 2.0.97 - Broken Access Control Vulnerability

  creativethemeshq · Blocksy

  Medium4.9
• CVE-2024-37469

  WordPress Blocksy theme <= 1.9.5 - Cross Site Request Forgery (CSRF) vulnerability

  creativethemeshq · Blocksy

  Medium5.4
• CVE-2024-11420

  Blocksy <= 2.0.77 - Authenticated (Contributor+) Stored Cross-Site Scripting

  creativethemeshq · Blocksy

  Medium6.4
• CVE-2024-5439

  Blocksy <= 2.0.50 - Authenticated (Contributor+) Stored Cross-Site Scripting

  creativethemeshq · Blocksy

  Medium6.4
• CVE-2024-4943

  Blocksy <= 2.0.46 - Authenticated (Contributor+) Stored Cross-Site Scripting

  creativethemeshq · Blocksy

  Medium6.4
• CVE-2024-4158

  Blocksy <= 2.0.42 - Authenticated (Contributor+) Stored Cross-Site Scripting

  creativethemeshq · Blocksy

  Medium6.4
• CVE-2024-3747

  Blocksy <= 2.0.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via About Me block

  creativethemeshq · Blocksy

  Medium6.4