Creative Themes vulnerabilities
9 published CVEs name Creative Themes among the affected products.
- 9Published CVEs9 of them scored
- 8Last 12 monthspublished in the last year
- 4Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-65444
WordPress Blocksy Companion plugin <= 2.1.60 - Cross Site Scripting (XSS) vulnerability
Creative Themes · Blocksy Companion
Medium6.5 - CVE-2026-97247
WordPress Blocksy Companion plugin <= 2.1.55 - Broken Access Control vulnerability
Creative Themes · Blocksy Companion
Medium6.5 - CVE-2026-58480
Blocksy Companion Pro < 2.1.47 Unauthenticated File Upload via save_attachments
Creative Themes · Blocksy Companion
Critical9.2 - CVE-2026-57624
WordPress Blocksy Companion Pro plugin <= 2.1.46 - Remote Code Execution (RCE) vulnerability
Creative Themes · Blocksy Companion Pro
Critical10.0 - CVE-2026-57630
WordPress Blocksy Companion Pro plugin <= 2.1.46 - Insecure Direct Object References (IDOR) vulnerability
Creative Themes · Blocksy Companion Pro
Medium5.3 - CVE-2026-57315
WordPress Blocksy Companion Pro plugin <= 2.1.45 - Remote Code Execution (RCE) vulnerability
Creative Themes · Blocksy Companion Pro
High8.5 - CVE-2026-40783
WordPress Blocksy Companion Pro plugin <= 2.1.37 - Remote Code Execution (RCE) vulnerability
Creative Themes · Blocksy Companion Pro
Critical9.9 - CVE-2026-39596
WordPress Blocksy Companion Pro plugin < 2.1.29 - SQL Injection vulnerability
Creative Themes · Blocksy Companion Pro
Critical9.3 - CVE-2024-35633
WordPress Blocksy Companion plugin <= 2.0.42 - Server Side Request Forgery (SSRF) vulnerability
Creative Themes · Blocksy Companion
Medium4.4