solwin Vulnerabilities and Affected Products

Open in search

Vulnerabilities associated with Blog Designer PRO.

Products

Clear product

Showing 4 vulnerabilities on this page for Blog Designer PRO

Signals CISA KEV Ransomware Nuclei
VulnerabilityTitle and contextCVSSEPSSPoCsSignals

WordPress Blog Designer PRO plugin <= 3.4.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in solwin Blog Designer PRO blog-designer-pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Blog Designer PRO: from n/a through <= 3.4.8.

CWE-862Oct 29, 2025
CVSS5.3v3.1EPSS0.254%PoCs0SignalsSTIX

WordPress Blog Designer PRO plugin <= 3.4.7 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in solwin Blog Designer PRO blog-designer-pro.This issue affects Blog Designer PRO: from n/a through <= 3.4.7.

CWE-79Sep 9, 2025
CVSS7.1v3.1EPSS0.228%PoCs0SignalsSTIX

WordPress Blog Designer PRO plugin <= 3.4.7 - Authenticated Non-Arbitrary Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in solwin Blog Designer PRO blog-designer-pro.This issue affects Blog Designer PRO: from n/a through <= 3.4.7.

CWE-98Sep 9, 2025
CVSS7.5v3.1EPSS0.501%PoCs0SignalsSTIX

WordPress Blog Designer PRO plugin <= 3.4.7 - Unauthenticated Non-Arbitrary Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in solwin Blog Designer PRO blog-designer-pro.This issue affects Blog Designer PRO: from n/a through <= 3.4.7.

CWE-98Aug 31, 2025
CVSS8.1v3.1EPSS0.468%PoCs0SignalsSTIX