CVE-2026-18488 | creativethemeshq Blocksy Companion Plugin up to 2.1.51 on WordPress Block Attribute tagName cross site scripting

September 1, 2026 Yanac

A vulnerability was found in creativethemeshq Blocksy Companion Plugin up to 2.1.51 on WordPress and classified as problematic. This affects an unknown function of the component Block Attribute. The manipulation of the argument tagName results in cross site scripting.

This vulnerability was named CVE-2026-18488. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More