Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

10 records

Vendor: creativethemeshq Component: Blocksy Clear all filters
TI-2024-10583 CVE-2024-11420 · GHSA-p2hf-563f-frm7

Blocksy <= 2.0.77 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the Contact Info Block link parameter in all versions up to, and including, 2.0.77 due to insufficient input sanitization and output escapi…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00256 Published 2024-12-05 No fix listed CWE-79
TI-2024-05055 CVE-2024-5439 · GHSA-8m9g-pfr8-r84c

Blocksy <= 2.0.50 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The Blocksy theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the custom_url parameter in all versions up to, and including, 2.0.50 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00288 Published 2024-06-05 No fix listed CWE-20
TI-2024-04596 CVE-2024-4943 · GHSA-vfxp-f364-2jrq

Blocksy <= 2.0.46 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘has_field_link_rel’ parameter in all versions up to, and including, 2.0.46 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00263 Published 2024-05-21 No fix listed CWE-79
TI-2024-03868 CVE-2024-4158 · GHSA-xwcj-m6m8-mr3g

Blocksy <= 2.0.42 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tagName’ parameter in versions up to, and including, 2.0.42 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0034 Published 2024-05-09 No fix listed CWE-79
TI-2024-03493 CVE-2024-3747 · GHSA-mg73-mvvv-5f9h

Blocksy <= 2.0.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via About Me block

Priority LOW 29

The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the className parameter in the About Me block in all versions up to, and including, 2.0.39 due to insufficient input sanitization and outpu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00423 Published 2024-05-02 No fix listed CWE-20
TI-2024-21828 CVE-2024-32961 · GHSA-8mv6-5xqh-8mf7

WordPress Blocksy theme <= 2.0.33 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in creativethemeshq Blocksy blocksy.This issue affects Blocksy: from n/a through <= 2.0.33.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0032 Published 2024-04-25 No fix listed CWE-79
TI-2024-01644 CVE-2024-1767 · GHSA-9mq3-jxwh-fh25

Blocksy <= 2.0.26 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's blocks in all versions up to, and including, 2.0.26 due to insufficient input sanitization and output escaping on user supplie…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0032 Published 2024-03-09 No fix listed CWE-79
TI-2024-16385 CVE-2024-24871 · GHSA-w8m7-jp57-83vr

WordPress Blocksy theme <= 2.0.19 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in creativethemeshq Blocksy blocksy.This issue affects Blocksy: from n/a through <= 2.0.19.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0032 Published 2024-02-08 No fix listed CWE-79