Blocksy Companion
Approved changes feed: RSS · Atom
cpe:2.3:a:creative_themes:blocksy_companion:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Creative Themes (6483cb11-087c-5e69-8500-605b7b2c5c99) |
|---|---|
| Product | Blocksy Companion (532502d6-675a-573d-9bcc-2520e3cc14f6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-58480 |
vulnerable | 2026-07-29 01:03:16.859197 |
Blocksy Companion Pro < 2.1.47 Unauthenticated File Upload via save_attachments
CRITICAL (9.8)
Blocksy Companion Pro plugin for WordPress before 2.1.47 contains an unauthenticated arbitrary file upload vulnerability that allows attackers to upload executable files by bypassing extension validation in the save_attachments function exposed through the Advanced Reviews feature. Attackers can exploit the Custom Fonts extension's flawed strpos() substring check by uploading double-extension filenames such as shell.woff2.php, causing the validation to pass on the substring match while the web server executes the file as PHP, achieving remote code execution.
Published: 2026-07-08T13:05:02.727Z
Updated: 2026-07-14T22:03:17.700Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-35633 |
vulnerable | 2026-06-08 06:39:42.187592 |
WordPress Blocksy Companion plugin <= 2.0.42 - Server Side Request Forgery (SSRF) vulnerability
MEDIUM (4.4)
Server-Side Request Forgery (SSRF) vulnerability in Creative Themes Blocksy Companion blocksy-companion.This issue affects Blocksy Companion: from n/a through <= 2.0.42.
Published: 2024-06-03T10:04:57.329Z
Updated: 2026-04-28T16:09:51.975Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.