Blocksy Companion

Vulnerabilities 15Slug blocksy-companionLatest version 2.1.41WordPress.org →

Minimum safe version

2.1.20

Update to 2.1.20 or later to address 15 fixable vulnerabilities

Latest available2.1.41 ✓

High 8.8

2025-11-11< 2.1.20

CVE-2025-12846

CVE Wordfence

Medium 6.4

2025-10-30< 2.1.15

CVE-2025-12475

CVE

N/A

2025-10-06< 2.1.15

Blocksy Companion <= 2.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting

Wordfence

Medium 6.4

2025-09-17< 2.1.11

WordPress Blocksy Companion Plugin <= 2.1.10 is vulnerable to Cross Site Scripting (XSS)

EUVD Patchstack Wordfence CVE

Medium 6.3

2024-10-16< 1.8.20

Freemius SDK <= 2.4.2 - Missing Authorization Checks

CVE

Medium 4.4

2024-06-03< 2.0.43

CVE-2024-35633

CVE Patchstack Wordfence

Medium 5.4

2024-05-13< 2.0.46

WordPress Blocksy Companion Plugin <= 2.0.45 is vulnerable to Cross Site Scripting (XSS)

Patchstack CVE Wordfence

High 8.8

2024-04-11< 2.0.29

CVE-2024-31932

CVE Wordfence Patchstack

Medium 5.4

2024-03-22< 2.0.32

CVE-2024-2392

CVE Wordfence Patchstack WPScan

N/A

2023-07-19< 1.8.47

WordPress Blocksy Companion Plugin <= 1.8.46 is vulnerable to Cross Site Scripting (XSS)

Patchstack WPScan CVE

Medium 4.3

2023-05-02< 1.8.82

CVE-2023-1911

CVE Patchstack Wordfence WPScan

Medium 5.5

2023-04-06< 1.8.68

CVE-2023-23898

CVE Patchstack Wordfence WPScan

N/A

2022-03-04< 1.8.20

Freemius SDK <= 2.4.2 - Missing Authorization Checks

Wordfence

N/A

2022-02-28< 1.8.20

WordPress Blocksy Companion plugin < 1.8.20 - Sensitive Information Disclosure vulnerability

Patchstack

N/A

2022-02-28< 1.8.20

WordPress Blocksy Companion plugin < 1.8.20 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Patchstack