EUVD-2024-37000

Malicious code in bioql PyPI...

CVE-2024-37412

Cross-Site Request Forgery CSRF vulnerability in blossomthemes Blossom Shop blossom-shop allows Cross Site Request Forgery.This issue affects Blossom Shop: from n/a through = 1.1.7...

CVE-2024-37412

Cross-Site Request Forgery CSRF vulnerability in blossomthemes Blossom Shop blossom-shop allows Cross Site Request Forgery.This issue affects Blossom Shop: from n/a through = 1.1.7...

CVE-2024-37412

Cross-Site Request Forgery CSRF vulnerability in Blossom Themes Blossom Shop allows Cross Site Request Forgery.This issue affects Blossom Shop: from n/a through 1.1.7...

CVE-2024-37412

CVE-2024-37412 is a CSRF vulnerability in Blossom Shop (WordPress plugin/theme) affecting Blossom Shop versions up to 1.1.7. Public sources confirm a Cross-Site Request Forgery issue with this plugin and indicate the CVE entry has been patched; no exploit details or affected product/version matri...

CVE-2024-37412 WordPress Blossom Shop theme <= 1.1.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in blossomthemes Blossom Shop blossom-shop allows Cross Site Request Forgery.This issue affects Blossom Shop: from n/a through = 1.1.7...

CVE-2024-37412 WordPress Blossom Shop theme <= 1.1.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Blossom Themes Blossom Shop allows Cross Site Request Forgery.This issue affects Blossom Shop: from n/a through 1.1.7...

PT-2025-2476 · Unknown · Blossom Shop

Name of the Vulnerable Software and Affected Versions: Blossom Shop versions 1.1.7 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by tricking the user into...

WordPress plugin Blossom Shop 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

WordPress Blossom Shop theme <= 1.1.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Theme Blossom Shop versions = 1.1.7...

WordPress Blossom Shop Theme <= 1.1.7 is vulnerable to Cross Site Request Forgery (CSRF)

Software Blossom Shop Type Theme Vulnerable versions = 1.1.7 Fixed in 1.1.8 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-37412 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID d40c45ee0a65 Credits Dhabaleshwar Das Requir...