Creative Themes
Vulnerability activity for Creative Themes: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 1
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 2
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 4
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 6.5MediumOct 30, 2026Creative Themes Blocksy Companion XSSCVE-2026-65444Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Creative Themes Blocksy Companion blocksy-companion allows Stored XSS.This issue affects Blocksy Companion: from n/a through 2.1.60.
- 6.5MediumSep 30, 2026Creative Themes Blocksy Companion Auth bypass / access controlCVE-2026-97247Unauthenticated Broken Access Control in Blocksy Companion <= 2.1.55 versions.
- 5.3MediumJun 26, 2026Creative Themes Blocksy Companion Pro Auth bypass / access controlCVE-2026-57630Unauthenticated Insecure Direct Object References (IDOR) in Blocksy Companion Pro <= 2.1.46 versions.
- 8.5HighJun 26, 2026Creative Themes Blocksy Companion Pro Code / command injectionCVE-2026-57315Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.45 versions.
Top products
- Blocksy Companion Pro2 CVEs in the last year
- Blocksy Companion2 CVEs in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.