BAKKBONE Australia vulnerabilities and threats

5 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	4.3		CVE-2026-122660FloristPress (WordPress plugin) · Missing Authorization Medium4.32026-11-07CVE Database V5CVE-2026-122660 CVE-2026-122660 is a missing authorization vulnerability in BAKKBONE Australia FloristPress versions prior to 7.8.6. The flaw allows exploitation of incorrectly configured access control security levels, potentially leading to unauthorized actions that impact integrity. The issue has a medium severity rating with a CVSS score of 4.3. A fix is available in version 7.8.6. Vulnerability BAKKBONE Australia	CVE Database V5	2026-11-07
High	7.5	EPSS 0.2%	CVE-2026-119499FloristPress (WordPress plugin) · Insertion of Sensitive Information Into Sent Data High7.5EPSS 0.2%2026-11-06CVE Database V5CVE-2026-119499 Insertion of Sensitive Information Into Sent Data vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion allows Retrieve Embedded Sensitive Data.This issue affects FloristPress: from n/a through 7.8.4. EPSS 0.2%Vulnerability BAKKBONE Australia	CVE Database V5	2026-11-06
High	7.1	EPSS 0.4%	CVE-2024-54347FloristPress (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.4%2024-12-13CVE Database V5CVE-2024-54347 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion allows Reflected XSS.This issue affects FloristPress: from n/a through <= 7.2.0. EPSS 0.4%Vulnerability BAKKBONE Australia	CVE Database V5	2024-12-13
Medium	5.4	EPSS 0.4%	CVE-2024-53798FloristPress (WordPress plugin) · Missing Authorization Medium5.4EPSS 0.4%2024-12-09CVE Database V5CVE-2024-53798 Missing Authorization vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion.This issue affects FloristPress: from n/a through <= 7.3.0. EPSS 0.4%Vulnerability BAKKBONE Australia	CVE Database V5	2024-12-09
Medium	4.3	EPSS 0.4%	CVE-2024-53799FloristPress (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.4%2024-12-06CVE Database V5CVE-2024-53799 Missing Authorization vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FloristPress: from n/a through <= 7.3.0. EPSS 0.4%Vulnerability BAKKBONE Australia	CVE Database V5	2024-12-06

Page 1 of 1