Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:creativethemes:blocksy_companion:*:*:*:*:*:wordpress:*:*

1 brief RSS
critical advisory

Unauthenticated Privilege Escalation in Blocksy Companion Plugin for WordPress

The Blocksy Companion WordPress plugin is vulnerable to unauthenticated privilege escalation, allowing attackers to create arbitrary vendor accounts by bypassing Dokan registration security checks.

Blocksy Companion wordpress privilege-escalation web-application
1r 1t 1c