Blogpoet

Blogpoet has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for Blogpoet has a vendor fix available, so running the current release closes it.

All of these findings were reported by Fariq Fadillah Gusti Insani (fariqfgi). Blogpoet is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The upstream project has not shipped an update in about 2 years, so new fixes are unlikely to arrive on their own.

Strategic Overview

Avg CVSSMedium

5.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Blogpoet vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2024-43998

Blogpoet <= 1.0.2 - Missing Authorization via blogpoet_install_and_activate_plugins()

Read the full analysis

Vulnerability Records

1 records


2024-08-29 00:00	Blogpoet <= 1.0.2 - Missing Authorization via blogpoet_install_and_activate_plugins() Blogpoet <= 1.0.2	`CVE-2024-43998`	5.3 Medium	Fariq Fadillah Gusti Insani (fariqfgi)	Yes

Showing 1–1 of 1 reports

Latestv1.0.4

Blogpoet

Author

WebsiteinWP

0.0(0)

0/100

Last Updated

2024-08-21 (2y ago)

Active Installs

100+

Downloads

5,671

Requires WP

5.9+

Requires PHP

7.0+

Created

2023-12-28 (3y ago)

BlogPoet is a cutting-edge WordPress theme that seamlessly integrates with Full Site Editing, offering a block-based approach to website design. Tailored specifically for bloggers, this theme combines the power of WordPress's latest features with a sleek and minimalistic design, providing a seamless and enjoyable blogging experience. Explore more about Blogpoet at https://websiteinwp.com/blogpoet-block-based-wordpress-theme-for-blogging.