WordPress Blocksy Companion Pro plugin <= 2.1.37 - Remote Code Execution (RCE) vulnerability

Description

Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.37 versions.

Vendor	Product	Versions
creative themes	blocksy companion pro	n/a

Tier C

VulDB21d ago

→ No new info (linked only)

CVSS 3.19.9 CRITICAL

VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CISA KEV❌ No

Actively exploited❌ No

CWECWE-94

PublishedJun 17, 2026

Last enriched21d agov2

Trending Score3

Source articles1

Independent1

Info Completeness8/14

Missing: epss, kev, exploit, patch, iocs, mitre_attack

0 upvotes0 downvotes

Last enriched 21d ago

v2Tier C21d ago

Updated vendor name to 'creative mes', clarified the description with more technical detail, and confirmed no exploit is available.

description

via VulDB

v121d ago

Initial creation