Skip to content
PluginCanary

Blocksy Companion

by Creative Themes · 300,000+ active installs · Checked 3 Nov 2026
Healthy4 Warnings

Healthy: vulnerability published 30 Oct 2026, fixed in 2.1.61.

81/ 100 Canary Score
Sub-scores for Blocksy Companion
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 30 Oct 2026, fixed in 2.1.61. Update to version 2.1.61 or later.30 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 9 Oct 2026, fixed in 2.1.59. Update to version 2.1.59 or later.9 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 24 Sep 2026, fixed in 2.1.56. Update to version 2.1.56 or later.24 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 31 Aug 2026, fixed in 2.1.52. Update to version 2.1.52 or later.31 Aug 2026Evidence
  • InfoSEC-39 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master11 Apr 2019 to 11 Apr 2019, 1 commits
creativethemeshq11 Apr 2019 to 29 Oct 2026, 647 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
5 days ago
Releases, 24 months
86
Tested up to
7.1 current
Requires PHP
7.0 supported 8.2+
Releases per quarter for Blocksy Companion
Q1 202423
Q2 202419
Q3 202413
Q4 202414
Q1 202510
Q2 20258
Q3 202513
Q4 20259
Q1 202614
Q2 202610
Q3 202610
Q4 20264

Last release 29 Oct 2026. Tested with WordPress 7.1 (current).

Support

0% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
30 Oct 2026Blocksy Companion <= 2.1.60 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.1.602.1.610
9 Oct 2026Blocksy Companion <= 2.1.58 - Unauthenticated Privilege Escalation to 'role' Parameter9.1<= 2.1.582.1.590
24 Sep 2026Blocksy Companion <= 2.1.55 - Missing Authorization5.3<= 2.1.552.1.560
31 Aug 2026Blocksy Companion <= 2.1.51 - Authenticated (Author+) Stored Cross-Site Scripting via 'tagName' Block Attribute (blocksy/dynamic-data)6.4<= 2.1.512.1.520
1 Jul 2026Blocksy Companion <= 2.1.46 - Unauthenticated Arbitrary File Upload via 'blc-review-images[]' Parameter9.8<= 2.1.462.1.470
18 Jun 2026Blocksy Companion <= 2.1.45 - Authenticated (Editor+) Stored Cross-Site Scripting via 'product_description' Parameter4.4<= 2.1.452.1.460
10 Nov 2025Blocksy Companion <= 2.1.19 - Authenticated (Author+) Arbitrary File Upload via SVG Upload Bypass8.8<= 2.1.192.1.200
6 Oct 2025Blocksy Companion <= 2.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.1.142.1.150
16 Sep 2025Blocksy Companion <= 2.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via blocksy_newsletter_subscribe Shortcode6.4<= 2.1.102.1.110
30 May 2024Blocksy Companion <= 2.0.42 - Authenticated (Admin+) Server-Side Request Forgery5.5<= 2.0.422.0.430
10 May 2024Blocksy Companion <= 2.0.45 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG Uploads6.4<= 2.0.452.0.460
10 Apr 2024Blocksy Companion <= 2.0.28 - Cross-Site Request Forgery5.3<= 2.0.282.0.290
21 Mar 2024Blocksy Companion <= 2.0.31 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.0.312.0.320
10 Apr 2023Blocksy Companion <= 1.8.81 - Authenticated(Subscriber+) Sensitive Information Exposure via blocksy_posts shortcode4.3<= 1.8.811.8.820
27 Jan 2023Blocksy Companion <= 1.8.67 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4< 1.8.681.8.680
4 Mar 2022Freemius SDK <= 2.4.2 - Missing Authorization Checks6.3< 1.8.201.8.200

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Blocksy Companion
Q1 20242.0
Q2 20243.0
Q3 20245.0
Q4 20244.5
Q1 20255.0
Q2 20255.0
Q3 20255.0
Q4 20255.0
Q1 20265.0

Average rating rose from 2.0 to 5.0 between Q1 2024 and Q1 2026.

Rating distribution
5 star85
4 star1
3 star0
2 star4
1 star3
Latest low reviews

Momentum

300,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Blocksy Companion
4 May 2026101,581
11 May 2026117,277
18 May 202639,921
25 May 2026172,599
1 Jun 202631,012
8 Jun 2026107,622
15 Jun 2026118,649
22 Jun 2026114,996
29 Jun 2026122,691
6 Jul 202640,454
13 Jul 2026122,693
20 Jul 2026115,001
27 Jul 2026117,734
3 Aug 2026128,115
10 Aug 2026116,790
17 Aug 202637,133
24 Aug 2026110,910
31 Aug 2026125,273
7 Sep 2026120,416
14 Sep 202635,385
21 Sep 202624,850
28 Sep 2026109,570
5 Oct 2026130,836
12 Oct 2026115,762
19 Oct 202630,674
26 Oct 2026123,242
2 Nov 20265,889

Weekly downloads over the last 4 weeks are 27% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Starter Sites & Templates by NeveScore 91 · 100,000+Sydney ToolboxScore 91 · 50,000+Import / Export Customizer SettingsScore 91 · 50,000+Bosa Starter SitesScore 91 · 30,000+Clever FoxScore 91 · 30,000+

Facts

Version2.1.61
AuthorCreative Themes
Added11 Apr 2019
Last updated29 Oct 2026
Active installs300,000+
Requires WordPress6.7
Tested up to7.1.4
Requires PHP7.0
CategoryDesign & Themes > Page Builders & Visual Editors
Tagswidget, widgets

Questions

Is Blocksy Companion still maintained?

Blocksy Companion was last updated on 29 Oct 2026. Its Canary status is Healthy.

Is Blocksy Companion safe?

Blocksy Companion has no open unpatched vulnerabilities on record. 9 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Blocksy Companion?

The wordpress.org author is Creative Themes. Recent committers: creativethemeshq, plugin-master. We have recorded no ownership change.

What can I use instead of Blocksy Companion?

Plugins in the same category with a higher Canary Score: Starter Sites & Templates by Neve, Sydney Toolbox, Import / Export Customizer Settings, Bosa Starter Sites, Clever Fox.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue