Blocksy vulnerabilities

2 known vulnerabilities in Blocksy from Creativethemeshq. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Blocksy: Deserialization of Untrusted Data

  CVE-2026-8365Jun 9, 2026CreativethemeshqEPSS 1.12%

  The Blocksy theme for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution via the 'blocksy_meta' REST API field and the V200 database migration in versions up to and including 2.1.35. This is due to insufficient input sanitization

• 8.8 High severity

  Blocksy: Cross-Site Request Forgery

  CVE-2024-37469Jan 2, 2025Creativethemeshq

  Cross-Site Request Forgery (CSRF) vulnerability in creativethemeshq Blocksy blocksy allows Cross Site Request Forgery.This issue affects Blocksy: from n/a through <= 2.0.22.