Blocksy Companion Pro
by WordPress
CVEs (6)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-40783 | Cri | 0.64 | 9.9 | 0.01 | Jun 17, 2026 | Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.37 versions. | ||
| CVE-2026-39596 | Cri | 0.60 | 9.3 | 0.00 | Jun 17, 2026 | Unauthenticated SQL Injection in Blocksy Companion Pro < 2.1.29 versions. | ||
| CVE-2026-58480 | Cri | 0.00 | 9.8 | 0.04 | Jul 8, 2026 | Blocksy Companion Pro plugin for WordPress before 2.1.47 contains an unauthenticated arbitrary file upload vulnerability that allows attackers to upload executable files by bypassing extension validation in the save_attachments function exposed through the Advanced Reviews… | ||
| CVE-2026-57624 | Cri | 0.00 | 10.0 | 0.01 | Jul 2, 2026 | Unauthenticated Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.46 versions. | ||
| CVE-2026-57630 | Med | 0.00 | 5.3 | 0.00 | Jun 26, 2026 | Unauthenticated Insecure Direct Object References (IDOR) in Blocksy Companion Pro <= 2.1.46 versions. | ||
| CVE-2026-57315 | Hig | 0.00 | 8.5 | 0.01 | Jun 26, 2026 | Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.45 versions. |
- risk 0.64cvss 9.9epss 0.01
Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.37 versions.
- risk 0.60cvss 9.3epss 0.00
Unauthenticated SQL Injection in Blocksy Companion Pro < 2.1.29 versions.
- risk 0.00cvss 9.8epss 0.04
Blocksy Companion Pro plugin for WordPress before 2.1.47 contains an unauthenticated arbitrary file upload vulnerability that allows attackers to upload executable files by bypassing extension validation in the save_attachments function exposed through the Advanced Reviews…
- risk 0.00cvss 10.0epss 0.01
Unauthenticated Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.46 versions.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Insecure Direct Object References (IDOR) in Blocksy Companion Pro <= 2.1.46 versions.
- risk 0.00cvss 8.5epss 0.01
Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.45 versions.