blossomthemes

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

blossomthemes records in CISA KEV

No blossomthemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Blossom Recipe Maker 1 record LOW Blossom Shop 1 record LOW Blossom Spa 1 record LOW Blossomthemes Email Newsletter 1 record MEDIUM Sarada 1 record LOW Vandana 1 record LOW Vilva 1 record LOW

Records

1 record in Blossom Shop · all components

TI-2024-24916 CVE-2024-37412 · GHSA-639h-j5qr-w5v4

WordPress Blossom Shop theme <= 1.1.7 - Cross Site Request Forgery (CSRF) vulnerability

LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in blossomthemes Blossom Shop blossom-shop allows Cross Site Request Forgery.This issue affects Blossom Shop: from n/a through <= 1.1.7.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00202 Published 2025-01-02 No fix listed CWE-352

Open these records in search →

Critical	1
High	4
Medium	4
Low	0
No CVSS	0