bakkbone-florist-companion vulnerabilities
CVEs whose affected-version data names the bakkbone-florist-companion package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-122660Medium· 4.3WordPress FloristPress plugin <= 7.8.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FloristPress: from n/a through 7.8.5.
▾ SunlitBAKKBONE Australia · bakkbone-florist-companionvia CVEORG
CVE-2026-119499High· 7.5WordPress FloristPress plugin <= 7.8.4 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion allows Retrieve Embedded Sensitive Data.This issue affects FloristPress: from n/a through 7.8.4.
▾ TwilightBAKKBONE Australia · bakkbone-florist-companionEPSS 0.24%via CVEORG