Security
فارسی
All products

blocksy

WordPress · Theme
14 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Blocksy <= 2.1.41 - Authenticated (Contributor+) PHP Object Injection via Deserialization of Untrusted Data via 'blocksy_meta' REST API FieldCVE-2026-8365 blocksy WordPress High Fix reported
Blocksy <= 2.0.22 - Cross-Site Request ForgeryCVE-2024-37469 blocksy WordPress Medium Fix reported
Blocksy <= 2.1.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via `blocksy_meta` FieldsCVE-2026-2583 blocksy WordPress Medium Fix reported
Blocksy <= 2.1.6 - Authenticated (Shop manager+) Stored Cross-Site ScriptingCVE-2025-55713 blocksy WordPress Medium Fix reported
Blocksy <= 2.0.97 - Missing AuthorizationCVE-2025-47465 blocksy WordPress Low Fix reported
Blocksy <= 2.0.77 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-11420 blocksy WordPress Medium Fix reported
Blocksy <= 2.0.22 - Cross-Site Request Forgery to Notice DismissalCVE-2024-31382 blocksy WordPress Medium Fix reported
Blocksy <= 2.0.50 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-5439 blocksy WordPress Medium Fix reported
Blocksy <= 2.0.46 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-4943 blocksy WordPress Medium Fix reported
Blocksy <= 2.0.42 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-4158 blocksy WordPress Medium Fix reported
Blocksy <= 2.0.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via About Me blockCVE-2024-3747 blocksy WordPress Medium Fix reported
Blocksy <= 2.0.33 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-32961 blocksy WordPress Medium Fix reported
Blocksy <= 2.0.26 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-1767 blocksy WordPress Medium Fix reported
Blocksy <= 2.0.19 - Authenticated (Editor+) Stored Cross-Site ScriptingCVE-2024-24871 blocksy WordPress Medium Fix reported