Vilva
Vilva has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for Vilva has a vendor fix available, so running the current release closes it.
All of these findings were reported by Dhabaleshwar Das. Vilva is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius.
CVE-2024-37102Vilva <= 1.2.2 - Cross-Site Request Forgery to Notice Dismissal
Read the full analysisVulnerability Records
Vilva
Author
Blossom Themes
Vilva is an easy to use and mobile friendly multi-purpose blog theme. Whether you want to share your expert fashion tips, your favorite recipes, or create a lifestyle, travel, food, beauty and makeup, coaching, or any other themed blog, Vilva is for you. With Vilva, you can change the look and feel (color and font) of your website with a click. You can flaunt your Instagram posts and increase your followers. Similarly, you can also build an email list and stay in touch with your customers. Vilva is SEO-friendly, speed optimized, translation ready and WooCommerce and RTL compatible. Check demo at https://blossomthemes.com/theme-demo/?theme=vilva, read the documentation at https://docs.blossomthemes.com/docs/vilva/, and get support at https://blossomthemes.com/support-ticket/.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C