Missing Authorization Vulnerability in CreativeThemes Blocksy Product
CVE-2025-47465
4.9MEDIUM
What is CVE-2025-47465?
The Blocksy theme by CreativeThemes suffers from a missing authorization vulnerability that arises from incorrectly configured access control security levels. This issue permits unauthorized users to gain access to features and functionalities that should be restricted, potentially leading to exposure or alteration of sensitive information. Affected versions include those up to 2.0.97, making it crucial for users to ensure proper configurations and apply necessary updates to mitigate any risks.
Affected Version(s)
Blocksy <= 2.0.97