124 matches found
EUVD-2025-35886
PerfreeBlog v4.0.11 has an arbitrary file deletion vulnerability in the unInstallTheme function...
EUVD-2025-35862
PerfreeBlog v4.0.11 has a File Upload vulnerability in the installTheme function...
CVE-2025-60731
PerfreeBlog v4.0.11 has a File Upload vulnerability in the installTheme function...
CVE-2025-60735
PerfreeBlog v4.0.11 has a File Upload vulnerability in the installPlugin function...
CVE-2025-60730
PerfreeBlog v4.0.11 has an arbitrary file deletion vulnerability in the unInstallTheme function...
CVE-2025-60729
PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath function...
CVE-2025-60731
PerfreeBlog v4.0.11 is affected by a File Upload vulnerability in the installTheme function. The CVE-2025-60731 entry indicates a network-based, high-severity issue (CVSS 3.1: 7.6, Impact: Confidentiality High, Availability Low, Integrity Low) that can be triggered without user interaction, with ...
PT-2025-43664
Name of the Vulnerable Software and Affected Versions PerfreeBlog version 4.0.11 Description PerfreeBlog version 4.0.11 contains a File Upload issue within the installPlugin function. This allows for potential unauthorized file uploads. Recommendations Update to a newer version that contains a fi...
PT-2025-43663
Name of the Vulnerable Software and Affected Versions PerfreeBlog version 4.0.11 Description PerfreeBlog version 4.0.11 contains a File Upload issue within the installTheme function. Recommendations At the moment, there is no information about a newer version that contains a fix for this...
PT-2025-43662
Name of the Vulnerable Software and Affected Versions PerfreeBlog version 4.0.11 Description PerfreeBlog version 4.0.11 contains an arbitrary file read issue within the validThemeFilePath function. This allows for unauthorized access to files. Recommendations Update to a newer version that contai...
CVE-2025-60730
PerfreeBlog v4.0.11 has an arbitrary file deletion vulnerability in the unInstallTheme function...
CVE-2025-60730
CVE-2025-60730 affects PerfreeBlog v4.0.11. The vulnerability resides in the unInstallTheme function and enables arbitrary file deletion, indicating a high-impact impact on confidentiality?no, actual impact stated: arbitrary file deletion (unauthorized file removal) with AV:N/AC:L/PR:N/UI:R/S:U/C...
CVE-2025-60735
PerfreeBlog v4.0.11 is affected by a File Upload vulnerability in the installPlugin function. The CVE-2025-60735 entry documents a network-accessible issue with high impact on confidentiality and low on integrity/availability (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L). Connected reports from...
CVE-2025-60735
PerfreeBlog v4.0.11 has a File Upload vulnerability in the installPlugin function...
CVE-2025-60730
PerfreeBlog v4.0.11 has an arbitrary file deletion vulnerability in the unInstallTheme function...
CVE-2025-60729
PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath function...
CVE-2025-60729
PerfreeBlog v4.0.11 contains an arbitrary file read vulnerability in the validThemeFilePath function. The issue is confirmed across multiple sources in the Connected documents and affects the PerfreeBlog 4.0.11 release; CVSS v3.1 base score cited as 5.3 (Medium). The exact exploit details, affect...
CVE-2025-60731
PerfreeBlog v4.0.11 has a File Upload vulnerability in the installTheme function...