CVE-2026-39596

Unauthenticated SQL Injection in Blocksy Companion Pro < 2.1.29 versions.

Score

CVSS 3.1 9.3 Critical

Status

Deferred - audit@patchstack.com

Published

2026-06-17

Last modified

2026-10-24

Weaknesses

CWE-89

Affected products

• Blocksy Companion Pro (Creative Themes)

References

• https://patchstack.com/database/wordpress/plugin/blocksy-companion-pro/vulnerability/wordpress-blocksy-companion-pro-pl…