Known vulnerabilities in Blocksy

13Reported vulnerabilities

8.8Highest CVSS score

2.1.53Latest version

300,000+Active installs

What to do now

Update Blocksy to 2.1.42 or later. 13 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 13, 2026 / Tested up to WordPress: Unknown / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2026-8365	High 8.8	1.1%	2.1.41 and earlier	`2.1.42`	June 8, 2026
CVE-2024-32961	Medium 6.4	0.3%	2.0.33 and earlier	`2.0.34`	April 23, 2024
CVE-2026-2583	Medium 6.4	0.2%	2.1.30 and earlier	`2.1.31`	March 2, 2026
CVE-2025-55713	Medium 5.5	0.2%	2.1.6 and earlier	`2.1.7`	August 14, 2025
CVE-2024-5439	Medium 5.4	0.3%	Before 2.0.51	`2.0.51`	June 5, 2024
CVE-2024-4943	Medium 5.4	0.3%	Before 2.0.47	`2.0.47`	May 21, 2024
CVE-2024-4158	Medium 5.4	0.3%	Before 2.0.43	`2.0.43`	May 14, 2024
CVE-2024-3747	Medium 5.4	0.4%	Before 2.0.40	`2.0.40`	May 2, 2024
CVE-2024-1767	Medium 5.4	0.3%	Before 2.0.27	`2.0.27`	March 9, 2024
CVE-2024-11420	Medium 5.4	0.2%	Before 2.0.78	`2.0.78`	December 5, 2024
CVE-2024-24871	Medium 4.4	0.3%	2.0.19 and earlier	`2.0.20`	February 5, 2024
CVE-2024-37469	Medium 4.3	0.2%	2.0.22 and earlier	`2.0.23`	July 1, 2024
CVE-2025-47465	Low 2.7	0.4%	2.0.97 and earlier	`2.0.98`	May 7, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.