The Blocksy Companion plugin for WordPress has a security issue in versions up to 2.0.28. This is because it does not properly check for a special code to verify the identity of the user. As a result, hackers can trick the website owner into doing something they shouldn’t by sending a fake request.