Read the docs

creativethemeshq

Records36All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

creativethemeshq records in CISA KEV

No creativethemeshq vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Blocksy 10 records LOW Blocksy Companion 6 records MEDIUM

Records

10 records in Blocksy · all components

TI-2024-21828 CVE-2024-32961 · GHSA-8mv6-5xqh-8mf7

WordPress Blocksy theme <= 2.0.33 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in creativethemeshq Blocksy blocksy.This issue affects Blocksy: from n/a through <= 2.0.33.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0032 Published 2024-04-25 No fix listed CWE-79
TI-2024-16385 CVE-2024-24871 · GHSA-w8m7-jp57-83vr

WordPress Blocksy theme <= 2.0.19 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in creativethemeshq Blocksy blocksy.This issue affects Blocksy: from n/a through <= 2.0.19.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0032 Published 2024-02-08 No fix listed CWE-79
TI-2024-03493 CVE-2024-3747 · GHSA-mg73-mvvv-5f9h

Blocksy <= 2.0.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via About Me block

Priority LOW 29

The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the className parameter in the About Me block in all versions up to, and including, 2.0.39 due to insufficient input sanitization and outpu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00423 Published 2024-05-02 No fix listed CWE-20
TI-2024-10583 CVE-2024-11420 · GHSA-p2hf-563f-frm7

Blocksy <= 2.0.77 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the Contact Info Block link parameter in all versions up to, and including, 2.0.77 due to insufficient input sanitization and output escapi…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00256 Published 2024-12-05 No fix listed CWE-79
TI-2024-05055 CVE-2024-5439 · GHSA-8m9g-pfr8-r84c

Blocksy <= 2.0.50 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The Blocksy theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the custom_url parameter in all versions up to, and including, 2.0.50 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00288 Published 2024-06-05 No fix listed CWE-20
TI-2024-04596 CVE-2024-4943 · GHSA-vfxp-f364-2jrq

Blocksy <= 2.0.46 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘has_field_link_rel’ parameter in all versions up to, and including, 2.0.46 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00263 Published 2024-05-21 No fix listed CWE-79
TI-2024-03868 CVE-2024-4158 · GHSA-xwcj-m6m8-mr3g

Blocksy <= 2.0.42 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tagName’ parameter in versions up to, and including, 2.0.42 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0034 Published 2024-05-09 No fix listed CWE-79
TI-2024-01644 CVE-2024-1767 · GHSA-9mq3-jxwh-fh25

Blocksy <= 2.0.26 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's blocks in all versions up to, and including, 2.0.26 due to insufficient input sanitization and output escaping on user supplie…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0032 Published 2024-03-09 No fix listed CWE-79
Open these records in search →