CyberSecBulletin

Blossomthemes vulnerabilities

We track 3 vulnerabilities in Blossomthemes products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on January 2, 2025.

3vulnerabilities
0critical
3high
0exploited
8.4average CVSS score

Latest Blossomthemes vulnerabilities

  • 8.8 High severity

    Blossom Shop: Cross-Site Request Forgery

    CVE-2024-37412Blossomthemes

    Cross-Site Request Forgery (CSRF) vulnerability in blossomthemes Blossom Shop blossom-shop allows Cross Site Request Forgery.This issue affects Blossom Shop: from n/a through <= 1.1.7.

  • 8.8 High severity

    Vilva: Cross-Site Request Forgery

    CVE-2024-37102Blossomthemes

    Cross-Site Request Forgery (CSRF) vulnerability in blossomthemes Vilva vilva allows Cross Site Request Forgery.This issue affects Vilva: from n/a through <= 1.2.2.

  • 7.5 High severity

    Blossom Spa: Missing Authorization

    CVE-2024-2107Blossomthemes

    The Blossom Spa theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.3 via generated source. This makes it possible for unauthenticated attackers to extract sensitive data including contents of password-