PatchTheCVEblossom shop vulnerabilities and fixes
Recent CVEs affecting blossom shop, with upgrade or downgrade steps. 1 tracked.
Also searched as: blossomshop.
blossom shop has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-01-02. Highest priority: CVE-2024-37412 (score 18/100).
- CVE-2024-37412 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in blossomthemes Blossom Shop blossom-shop allows Cross Site R
FAQ
How do I fix blossom shop vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is blossom shop being exploited right now?
None of the tracked blossom shop CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which blossom shop CVE should I patch first?
CVE-2024-37412 currently ranks highest (18/100): Cross-Site Request Forgery (CSRF) vulnerability in blossomthemes Blossom Shop blossom-shop allows Cross Site R.