Vulnerabilities

TI-2024-05243 CVE-2024-5647 · GHSA-3439-fg7p-gc46

Cross-site scripting in BlossomThemes Social Feed

LOW 29

Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled Magnific Popups library (version 1.1.0) in various versions due to insufficient input sanitization and output escaping…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00366 Published 2025-07-03 No fix listed CWE-79

TI-2024-24916 CVE-2024-37412 · GHSA-639h-j5qr-w5v4

WordPress Blossom Shop theme <= 1.1.7 - Cross Site Request Forgery (CSRF) vulnerability

LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in blossomthemes Blossom Shop blossom-shop allows Cross Site Request Forgery.This issue affects Blossom Shop: from n/a through <= 1.1.7.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00202 Published 2025-01-02 No fix listed CWE-352

TI-2024-24758 CVE-2024-37243 · GHSA-r95p-3cgx-x6w2

WordPress Vandana Lite theme <= 1.1.9 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in blossomthemes Vandana Lite vandana-lite allows Cross Site Request Forgery.This issue affects Vandana Lite: from n/a through <= 1.1.9.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00185 Published 2025-01-02 No fix listed CWE-352

TI-2024-24631 CVE-2024-37102 · GHSA-r297-8r34-c73v

WordPress Vilva theme <= 1.2.2 - Cross Site Request Forgery (CSRF) vulnerability

LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in blossomthemes Vilva vilva allows Cross Site Request Forgery.This issue affects Vilva: from n/a through <= 1.2.2.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0021 Published 2025-01-02 No fix listed CWE-352

TI-2023-25957 CVE-2023-47849 · GHSA-9hfr-xch8-m267

WordPress BlossomThemes Email Newsletter plugin <= 2.2.4 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in Blossom Themes BlossomThemes Email Newsletter blossomthemes-email-newsletter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BlossomThemes…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00372 Published 2024-12-09 No fix listed CWE-862

TI-2024-24627 CVE-2024-37098 · GHSA-h65f-46fv-r349

WordPress BlossomThemes Email Newsletter plugin <= 2.2.6 - Server Side Request Forgery (SSRF) vulnerability

MEDIUM 42

Server-Side Request Forgery (SSRF) vulnerability in Blossom Themes BlossomThemes Email Newsletter.This issue affects BlossomThemes Email Newsletter: from n/a through 2.2.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00284 Published 2024-06-26 No fix listed CWE-918

TI-2024-20798 CVE-2024-31429 · GHSA-r7vp-7q6j-j6g8

WordPress Sarada Lite theme <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerability

LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in Blossom Themes Sarada Lite.This issue affects Sarada Lite: from n/a through 1.1.2.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00227 Published 2024-04-15 No fix listed CWE-352

TI-2024-01958 CVE-2024-2107 · GHSA-q3mx-vc3g-474w

Blossom Spa <= 1.3.3 - Sensitive Information Exposure

LOW 33

The Blossom Spa theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.3 via generated source.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00474 Published 2024-03-12 No fix listed CWE-862

TI-2022-17412 CVE-2022-37338 · GHSA-qj68-h3qr-6vgv

Cross-site scripting in blossomthemes Blossom Recipe Maker

LOW 25

Multiple Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerabilities in Blossom Recipe Maker plugin <= 1.0.7 at WordPress.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00524 Published 2022-09-23 No fix listed CWE-79

Vulnerabilities

Filters