Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2023-47849
Disclosure Date: December 09, 2024 (last updated December 21, 2024)
Missing Authorization vulnerability in blossomthemes BlossomThemes Email Newsletter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BlossomThemes Email Newsletter: from n/a through 2.2.4.
0
Attacker Value
Unknown
CVE-2024-2107
Disclosure Date: March 12, 2024 (last updated January 23, 2025)
The Blossom Spa theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.4 via generated source. This makes it possible for unauthenticated attackers to extract sensitive data including contents of password-protected or scheduled posts.
0
Attacker Value
Unknown
CVE-2022-37338
Disclosure Date: September 01, 2022 (last updated February 24, 2025)
Multiple Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerabilities in Blossom Recipe Maker plugin <= 1.0.7 at WordPress.
0
