Threat Database

Threat Entry Updated 2026-11-07

Bakkbone Florist Companion - Security Vulnerability (CVE-2026-122660)

Missing Authorization vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FloristPress: from n/a through 7.8.5.

PLUGIN Bakkbone Florist Companion

CVE-2026-122660

MEDIUM CVSS 4.3 2026-11-07

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-11-06

Bakkbone Florist Companion - Security Vulnerability (CVE-2026-119499)

Insertion of Sensitive Information Into Sent Data vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion allows Retrieve Embedded Sensitive Data.This issue affects FloristPress: from n/a through 7.8.4.

PLUGIN Bakkbone Florist Companion

CVE-2026-119499

HIGH CVSS 7.5 2026-11-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Bakkbone Florist Companion - Cross-Site Scripting (XSS) (CVE-2026-1986)

The FloristPress for Woo – Customize your eCommerce store for your Florist plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'noresults' parameter in all versions up to, and including, 7.8.2 due to insufficient input sanitization and output escaping on the user supplied 'noresults' parameter. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

PLUGIN Bakkbone Florist Companion

CVE-2026-1986

MEDIUM CVSS 6.1 2026-03-26

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Bakkbone Florist Companion - Cross-Site Scripting (XSS) (CVE-2024-54347)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion allows Reflected XSS.This issue affects FloristPress: from n/a through

PLUGIN Bakkbone Florist Companion

CVE-2024-54347

HIGH CVSS 7.1 2024-12-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Bakkbone Florist Companion - Broken Access Control (CVE-2024-53798)

Missing Authorization vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion.This issue affects FloristPress: from n/a through

PLUGIN Bakkbone Florist Companion

CVE-2024-53798

MEDIUM CVSS 5.4 2024-12-09

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Bakkbone Florist Companion - Broken Access Control (CVE-2024-53799)

Missing Authorization vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FloristPress: from n/a through

PLUGIN Bakkbone Florist Companion

CVE-2024-53799

MEDIUM CVSS 4.3 2024-12-06

Risk Score

Open Full Technical Breakdown