Vendor

    Blossomthemes

    8 known vulnerabilities in products by Blossomthemes, 0 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Blossomthemes
    MediumCVE-2024-5647

    BlossomThemes Social Feed: Cross-site Scripting

    also in 11 other products

    		6.4
    HighCVE-2024-2107

    Blossom Spa <= 1.3.3 - Sensitive Information Exposure

    		5.8
    MediumCVE-2022-37338

    Blossomthemes Blossom Recipe Maker (WordPress plugin): Cross-site Scripting

    		4.1
    CriticalCVE-2024-37098

    BlossomThemes Email Newsletter: Server-Side Request Forgery (SSRF)

    		4.4
    HighCVE-2024-37102

    WordPress Vilva theme <= 1.2.2 - Cross Site Request Forgery (CSRF) vulnerability

    		4.3
    HighCVE-2024-37412

    WordPress Blossom Shop theme <= 1.1.7 - Cross Site Request Forgery (CSRF) vulnerability

    		4.3
    MediumCVE-2024-37243

    WordPress Vandana Lite theme <= 1.1.9 - Cross Site Request Forgery (CSRF) vulnerability

    		4.3
    HighCVE-2024-31429

    WordPress Sarada Lite theme <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerability

    		4.3