What’s Vulnerable › Products

creativethemeshq Blocksy vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your creativethemeshq Blocksy version is affected

Latest creativethemeshq Blocksy vulnerabilities

• CVE-2026-8365 — Blocksy <= 2.1.41 - Authenticated (Contributor+) PHP Object Injection via Deserialization of Untrusted Data via 'blocksy_meta' REST API Field (CVSS 8.8)
• CVE-2026-2583 — Blocksy <= 2.1.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via `blocksy_meta` Fields (CVSS 6.4)
• CVE-2025-55713 — WordPress Blocksy Theme <= 2.1.6 - Cross Site Scripting (XSS) Vulnerability (CVSS 5.9)
• CVE-2025-47465 — WordPress Blocksy theme <= 2.0.97 - Broken Access Control Vulnerability (CVSS 4.9)
• CVE-2024-37469 — WordPress Blocksy theme <= 1.9.5 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8)
• CVE-2024-11420 — Blocksy <= 2.0.77 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2024-5439 — Blocksy <= 2.0.50 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2024-4943 — Blocksy <= 2.0.46 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2024-4158 — Blocksy <= 2.0.42 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2024-3747 — Blocksy <= 2.0.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via About Me block (CVSS 5.4)
• CVE-2024-32961 — WordPress Blocksy theme <= 2.0.33 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2024-31382 — WordPress Blocksy theme <= 2.0.22 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8)
• CVE-2024-1767 — Blocksy <= 2.0.26 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2024-24871 — WordPress Blocksy theme <= 2.0.19 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)