Approved changes feed: RSS · Atom

cpe:2.3:a:creative_themes:blocksy_companion_pro:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCreative Themes (6483cb11-087c-5e69-8500-605b7b2c5c99)
ProductBlocksy Companion Pro (35ef05e5-c4c5-5b42-bb5a-306c4bc52947)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-57630 vulnerable 2026-07-29 01:03:15.758454 WordPress Blocksy Companion Pro plugin <= 2.1.46 - Insecure Direct Object References (IDOR) vulnerability
MEDIUM (5.3)
Unauthenticated Insecure Direct Object References (IDOR) in Blocksy Companion Pro <= 2.1.46 versions.
Published: 2026-06-26T14:53:09.171Z
Updated: 2026-06-26T20:16:28.803Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-57624 vulnerable 2026-07-29 01:03:15.715825 WordPress Blocksy Companion Pro plugin <= 2.1.46 - Remote Code Execution (RCE) vulnerability
CRITICAL (10)
Unauthenticated Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.46 versions.
Published: 2026-07-02T11:15:26.664Z
Updated: 2026-07-02T19:39:14.229Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-57315 vulnerable 2026-07-29 01:00:29.588531 WordPress Blocksy Companion Pro plugin <= 2.1.45 - Remote Code Execution (RCE) vulnerability
HIGH (8.5)
Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.45 versions.
Published: 2026-06-26T14:52:57.384Z
Updated: 2026-06-26T20:17:10.083Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-40783 vulnerable 2026-07-29 00:49:30.454760 WordPress Blocksy Companion Pro plugin <= 2.1.37 - Remote Code Execution (RCE) vulnerability
CRITICAL (9.9)
Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.37 versions.
Published: 2026-06-17T09:51:10.414Z
Updated: 2026-06-17T12:31:43.137Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-39596 vulnerable 2026-07-29 00:46:19.206980 WordPress Blocksy Companion Pro plugin < 2.1.29 - SQL Injection vulnerability
CRITICAL (9.3)
Unauthenticated SQL Injection in Blocksy Companion Pro < 2.1.29 versions.
Published: 2026-06-17T09:50:54.778Z
Updated: 2026-06-17T12:32:58.186Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.