WordPress Blocksy Companion Pro plugin <= 2.1.45 - Remote Code Execution (RCE) vulnerability

Description

Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.45 versions.

Vendor	Product	Versions
blocksy	blocksy companion pro	n/a

Tier C

VulDB7d ago

→ No new info (linked only)

CVSS 3.18.5 HIGH

VectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

CISA KEV❌ No

Actively exploited✅ Yes

CWECWE-94

PublishedJun 26, 2026

Last enriched7d agov2

Trending Score16

Source articles1

Independent1

Info Completeness8/14

Missing: epss, kev, exploit, patch, iocs, mitre_attack

0 upvotes0 downvotes

Last enriched 7d ago

v2Tier C7d ago

Updated description with more technical detail, changed severity to CRITICAL, and marked as actively exploited.

descriptionseverityactivelyExploited

via VulDB

v17d ago

Initial creation