Vulnerabilities

TI-2026-86586 CVE-2026-122660 · GHSA-5xpw-q2mg-q7qg

WordPress FloristPress plugin: Broken Access Control vulnerability

LOW 19

Missing Authorization vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FloristPress: from n/a through…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00198 Published 2026-11-07 No fix listed CWE-862

TI-2026-85782 CVE-2026-119499 · GHSA-g6mh-6qc4-w2p6

Sensitive data exposure in WordPress FloristPress plugin

LOW 38

Insertion of Sensitive Information Into Sent Data vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion allows Retrieve Embedded Sensitive Data.This issue affects FloristPress: from n/a through 7.8.…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00245 Published 2026-11-06 No fix listed CWE-201

TI-2024-36435 CVE-2024-54347 · GHSA-mcjp-gvrf-fpxw

WordPress FloristPress plugin <= 7.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion allows Reflected XSS.This issue affects FloristPress: from…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00354 Published 2024-12-13 No fix listed CWE-79

TI-2024-35996 CVE-2024-53798 · GHSA-c876-w45q-72x4

WordPress FloristPress plugin <= 7.3.0 - Nonce Leakage to Broken Access Control vulnerability

LOW 24

Missing Authorization vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion.This issue affects FloristPress: from n/a through <= 7.3.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00357 Published 2024-12-09 No fix listed CWE-862

TI-2024-35997 CVE-2024-53799 · GHSA-f7j8-7c7g-3h29

WordPress FloristPress plugin <= 7.3.0 - Broken Access Control vulnerability

LOW 20