PatchTheCVEcreativethemes vulnerabilities
Recent CVEs affecting creativethemes products. 13 tracked.
creativethemes has 13 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 13. Most recent: 2025-01-02. Highest priority: CVE-2024-4487 (score 32/100).
- CVE-2024-5439 MEDIUM 6.4 UPGRADE The Blocksy theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the custom_url parameter i
- CVE-2024-4943 MEDIUM 6.4 UPGRADE The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘has_field_link_rel’ para
- CVE-2024-4487 MEDIUM 6.4 UPGRADE The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG uploads in ver
- CVE-2024-4158 MEDIUM 6.4 UPGRADE The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tagName’ parameter in ve
- CVE-2024-3747 MEDIUM 6.4 UPGRADE The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the className parameter in th
- CVE-2024-37469 MEDIUM 5.4 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in creativethemeshq Blocksy blocksy allows Cross Site Request
- CVE-2024-35633 MEDIUM 4.4 UPGRADE Server-Side Request Forgery (SSRF) vulnerability in Creative Themes Blocksy Companion blocksy-companion.This i
- CVE-2024-31932 MEDIUM 5.4 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in CreativeThemes Blocksy Companion.This issue affects Blocksy
- CVE-2024-31382 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in creativethemeshq Blocksy blocksy.This issue affects Blocksy
- CVE-2024-2392 MEDIUM 6.4 UPGRADE The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Newsl
- CVE-2024-24871 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in creative
- CVE-2024-1767 MEDIUM 6.4 UPGRADE The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's blocks in all ve
- CVE-2024-11420 MEDIUM 6.4 UPGRADE The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the Contact Info Block link p
FAQ
How do I fix creativethemes vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is creativethemes being exploited right now?
None of the tracked creativethemes CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which creativethemes CVE should I patch first?
CVE-2024-4487 currently ranks highest (32/100): The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG uploads in ver.