WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Blocksy Companion

The official companion plugin for Blocksy theme, packed with starter sites, extra features, and integrations.

13Reported vulnerabilities
9.8Highest CVSS score
2.1.53Latest version
300,000+Active installs

What to do now

Update Blocksy Companion to 2.1.52 or later. 12 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 13, 2026 / Tested up to WordPress: 7.1 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2026-58480 Critical 9.2 3.6% 0 to 2.1.46 (inclusive) — July 8, 2026
CVE-2026-15158 Critical 9.8 1.1% 0 to 2.1.46 (inclusive) 2.1.47 July 9, 2026
CVE-2025-12846 High 8.8 0.7% 0 to 2.1.19 (inclusive) 2.1.20 November 11, 2025
CVE-2023-1911 Medium 4.3 0.5% Before 1.8.82 1.8.82 May 2, 2023
CVE-2026-18488 Medium 6.4 0.3% 0 to 2.1.51 (inclusive) 2.1.52 September 1, 2026
CVE-2024-2392 Medium 6.4 0.3% Before 2.0.32 2.0.32 March 22, 2024
CVE-2023-23898 Medium 6.4 0.3% Before 1.8.68 1.8.68 January 27, 2023
CVE-2025-12475 Medium 6.4 0.2% 0 to 2.1.14 (inclusive) 2.1.15 October 30, 2025
CVE-2025-9565 Medium 6.4 0.2% 0 to 2.1.10 (inclusive) 2.1.11 September 17, 2025
CVE-2024-35633 Medium 5.5 0.3% 2.0.42 and earlier 2.0.43 May 30, 2024
CVE-2024-4487 Medium 5.4 0.4% Before 2.0.46 2.0.46 May 14, 2024
CVE-2024-31932 Medium 5.3 0.2% 2.0.28 and earlier 2.0.29 April 10, 2024
CVE-2026-12430 Medium 4.4 0.3% 0 to 2.1.45 (inclusive) 2.1.46 June 19, 2026

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.