Bloger

Vulnerabilities 6Slug blogerLatest version 1.2.7WordPress.org →

Minimum safe version

1.2.7

Update to 1.2.7 or later to address 3 fixable vulnerabilities

Latest available1.2.7 ✓Affected up to1.2.6 ⚠⚠ 2 vulnerabilities have no fix
N/A
2022-01-11< 1.2.7

AccessPress Themes and Plugin <= Various Versions - Cross-Site Request Forgery

Wordfence
N/A Unfixed
2022-01-24≤ 1.2.6

WordPress Bloger theme <= 1.2.6 - Cross-Site Request Forgery (CSRF) leading to Arbitrary Plugin Activation/Deactivation

Patchstack
N/A Unfixed
2022-01-28≤ 1.2.6

WordPress Bloger theme <= 1.2.6 - Authenticated Arbitrary Plugin Activation/Deactivation vulnerability

Patchstack
High 8.8
2021-11-28≤ 1.2.6

WordPress Bloger theme <= 1.2.6 - Arbitrary File Upload vulnerability

PatchstackCVEWordfence