PT-2026-52801 · Creativethemes+1 · Blocksy Companion Pro

Austin Ginder

·

CVE-2026-57630

·

Published

2026-06-26

·

Updated

2026-08-21

CVSS v3.1

5.3

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Blocksy Companion Pro versions prior to 2.1.47
Description An Insecure Direct Object Reference (IDOR) exists due to missing validation on a user-controlled key. This allows unauthenticated attackers to perform unauthorized actions. IDOR is a type of access control flaw where an application provides direct access to objects based on user-supplied input.
Recommendations Update Blocksy Companion Pro to version 2.1.47 or later.

Fix

DoS

IDOR

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2026-57630

Affected Products

Blocksy Companion Pro