← All advisories

High severity7.1NVD Advisory· Published Dec 31, 2025· Updated Apr 28, 2026

CVE-2025-31054

CVE-2025-31054

Description

Cross-Site Request Forgery (CSRF) vulnerability in Themefy Bloggie allows Reflected XSS.This issue affects Bloggie: from n/a through 2.0.8.

Affected products

1

Themefy/Bloggiellm-create
Range: <=2.0.8

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/theme/bloggie/vulnerability/wordpress-bloggie-2-0-8-cross-site-scripting-xss-vulnerabilitynvd

News mentions

0

No linked articles in our index yet.