Skip to content
Noroxi

CreativeThemes records

16 published records for vendor creativethemes.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
43.8%
Median publish → KEV
No record has entered KEV

Records by year

  1. 23
  2. 24
  3. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

16 records
  • CVE-2024-31382
    35Monitor

    WordPress Blocksy theme <= 2.0.22 - Cross Site Request Forgery (CSRF) vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    creativethemes · blocksyApr 15, 2024

  • CVE-2024-31932
    35Monitor

    WordPress Blocksy Companion plugin <= 2.0.28 - Cross Site Request Forgery (CSRF) vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    creativethemes · blocksy companionApr 11, 2024

  • CVE-2024-37469
    35Monitor

    WordPress Blocksy theme <= 1.9.5 - Cross Site Request Forgery (CSRF) vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    creativethemes · blocksyJan 2, 2025

  • CVE-2024-2392
    25Monitor

    Blocksy Companion <= 2.0.31 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 6.4No exploitEPSS 0%

    creativethemes · blocksy companionMar 21, 2024

  • CVE-2024-4487
    21Monitor

    Blocksy Companion <= 2.0.45 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG Uploads

    MediumCVSS 5.4No exploitEPSS 0%

    creativethemes · blocksy companionMay 14, 2024

  • CVE-2024-3747
    21Monitor

    Blocksy <= 2.0.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via About Me block

    MediumCVSS 5.4No exploitEPSS 0%

    creativethemes · blocksyMay 2, 2024

  • CVE-2023-23898
    21Monitor

    WordPress Blocksy Companion Plugin <= 1.8.67 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    creativethemes · blocksy companionApr 6, 2023

  • CVE-2024-4158
    21Monitor

    Blocksy <= 2.0.42 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    creativethemes · blocksyMay 14, 2024

  • CVE-2024-24871
    21Monitor

    WordPress Blocksy theme <= 2.0.19 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    creativethemes · blocksyFeb 8, 2024

  • CVE-2024-1767
    21Monitor

    Blocksy <= 2.0.26 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    creativethemes · blocksyMar 9, 2024

  • CVE-2024-32961
    21Monitor

    WordPress Blocksy theme <= 2.0.33 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    creativethemes · blocksyApr 25, 2024

  • CVE-2024-5439
    21Monitor

    Blocksy <= 2.0.50 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    creativethemes · blocksyJun 5, 2024

  • CVE-2024-4943
    21Monitor

    Blocksy <= 2.0.46 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    creativethemes · blocksyMay 20, 2024

  • CVE-2024-11420
    21Monitor

    Blocksy <= 2.0.77 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    creativethemes · blocksyDec 5, 2024

  • CVE-2024-35633
    19Monitor

    WordPress Blocksy Companion plugin <= 2.0.42 - Server Side Request Forgery (SSRF) vulnerability

    MediumCVSS 4.9No exploitEPSS 0%

    creativethemes · blocksy companionJun 3, 2024

  • CVE-2023-1911
    17Monitor

    Blocksy Companion < 1.8.82 - Subscriber+ Draft Post Access

    MediumCVSS 4.3No exploitEPSS 1%

    creativethemes · blocksy companionMay 2, 2023