Sensitive Data Exposure in BAKKBONE Australia FloristPress Plugin
CVE-2026-119499

7.5HIGH

Key Information:

Vendor

WordPress

Vendor
CVE Published:
6 November 2026

What is CVE-2026-119499?

The BAKKBONE Australia FloristPress plugin is affected by a vulnerability that permits unauthorized retrieval of sensitive information embedded in sent data. This flaw allows adversaries to exploit the plugin and potentially access confidential data, presenting significant security risks to users. The issue specifically impacts FloristPress versions up to 7.8.4, emphasizing the necessity for prompt updates and security measures to safeguard sensitive information.

Affected Version(s)

FloristPress 0 <= 7.8.4

References

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

cazy | Patchstack Bug Bounty Program
.