Vulnerabilidades em creativethemeshq

22 resultados
Análise Vexday

A Creative Themes HQ apresenta um volume moderado de 22 vulnerabilidades registradas, com apenas 1 classificada como crítica e nenhuma atualmente sob ataque ativo, o que reduz o risco imediato. A fraqueza dominante é Cross-Site Scripting (CWE-79), padrão em plataformas de temas web, e o ritmo de descobertas mantém-se estável com 3 vulnerabilidades nos últimos 90 dias. O risco permanece em nível operacional controlável, sem sinais de exploração em massa ou vulnerabilidades críticas não-corrigidas em circulação.

CVE-2026-8365HIGHBlocksy <= 2.1.41 - Authenticated (Contributor+) PHP Object Injection via Deserialization of Untrusted Data via 'blocksy_meta' REST API FieldEPSS 1.2%CVE-2025-12846HIGHBlocksy Companion <= 2.1.19 - Authenticated (Author+) Arbitrary File Upload via SVG Upload BypassEPSS 0.7%CVE-2026-15158CRITICALBlocksy Companion <= 2.1.46 - Unauthenticated Arbitrary File Upload via 'blc-review-images[]' ParameterEPSS 0.6%CVE-2022-4974MEDIUMFreemius SDK <= 2.4.2 - Missing Authorization ChecksEPSS 0.4%CVE-2024-4487MEDIUMBlocksy Companion <= 2.0.45 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG UploadsEPSS 0.4%CVE-2024-3747MEDIUMBlocksy <= 2.0.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via About Me blockEPSS 0.4%CVE-2025-47465MEDIUMWordPress Blocksy theme <= 2.0.97 - Broken Access Control VulnerabilityEPSS 0.4%CVE-2024-2392MEDIUMBlocksy Companion <= 2.0.31 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2024-4158MEDIUMBlocksy <= 2.0.42 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2026-12430MEDIUMBlocksy Companion <= 2.1.45 - Authenticated (Editor+) Stored Cross-Site Scripting via 'product_description' ParameterEPSS 0.3%CVE-2024-32961MEDIUMWordPress Blocksy theme <= 2.0.33 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-1767MEDIUMBlocksy <= 2.0.26 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2024-24871MEDIUMWordPress Blocksy theme <= 2.0.19 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-5439MEDIUMBlocksy <= 2.0.50 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2024-4943MEDIUMBlocksy <= 2.0.46 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2024-11420MEDIUMBlocksy <= 2.0.77 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2025-9565MEDIUMBlocksy Companion <= 2.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via blocksy_newsletter_subscribe ShortcodeEPSS 0.2%CVE-2024-31382MEDIUMWordPress Blocksy theme <= 2.0.22 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2026-2583MEDIUMBlocksy <= 2.1.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via `blocksy_meta` FieldsEPSS 0.2%CVE-2025-12475MEDIUMBlocksy Companion <= 2.1.14 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%