Blossomthemes
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Blossom Recipe Maker (WordPress plugin) | 1 | – | Sep 23, 2022 |
| Blossom Shop | 1 | – | Jan 2, 2025 |
| Blossom Spa | 1 | – | Mar 12, 2024 |
| BlossomThemes Social Feed | 1 | – | Jul 3, 2025 |
| Vandana Lite | 1 | – | Jan 2, 2025 |
| Vilva | 1 | – | Jan 2, 2025 |
Exploited and recent CVEs
- CVE-2024-5647 Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library 0.4%
- CVE-2024-37412 WordPress Blossom Shop theme <= 1.1.7 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2024-37243 WordPress Vandana Lite theme <= 1.1.9 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2024-37102 WordPress Vilva theme <= 1.2.2 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2024-2107 Blossom Spa <= 1.3.3 - Sensitive Information Exposure 0.5%
- CVE-2022-37338 WordPress Blossom Recipe Maker plugin <= 1.0.7 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities 0.5%