Vulnerabilities / Blocksy Companion
Blocksy Companion vulnerabilities
Advisories WPSec published for Blocksy Companion. Other sources may list more. Its attack surface: Blocksy Companion on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-16 | WPSEC-2026-1114 | Blocksy Companion <= 2.1.59 - Cross-Site Request Forgery to Extension Deactivation via Incorrect License Handler | Medium 4.3 | 2.1.60 |
| 2026-10-10 | WPSEC-2026-0686 | Blocksy Companion <= 2.1.58 - Authenticated (Contributor+) Sensitive Information Exposure via blocksy_posts Shortcode | Medium 4.3 | 2.1.59 |
| 2026-10-02 | WPSEC-2026-0353 | Blocksy Companion <= 2.1.57 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload | Medium 6.4 | 2.1.58 |
| 2026-10-02 | WPSEC-2026-0352 | Blocksy Companion <= 2.1.57 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Search Block Placeholder | Medium 6.4 | 2.1.58 |
| 2026-10-02 | WPSEC-2026-0351 | Blocksy Companion <= 2.1.57 - Authenticated (Contributor+) Stored Cross-Site Scripting via Breadcrumbs Block Attributes | Medium 6.4 | 2.1.58 |
License: CC BY 4.0