Description
Cross-Site Request Forgery (CSRF) vulnerability in Themefy Bloggie allows Reflected XSS.This issue affects Bloggie: from n/a through 2.0.8.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Themefy | Bloggie | ≤ 2.0.8 | — |
High · 7.1
CVE-2025-31054
EUVD-2025-206061GHSA-xfrg-wrcm-x2pr
WordPress Bloggie theme <= 2.0.8 - Cross Site Scripting (XSS) Vulnerability
Published Dec 31, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack