EUVD-2025-35860

PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath function...

EUVD-2025-35862

PerfreeBlog v4.0.11 has a File Upload vulnerability in the installTheme function...

EUVD-2025-35886

PerfreeBlog v4.0.11 has an arbitrary file deletion vulnerability in the unInstallTheme function...

CVE-2025-60731

PerfreeBlog v4.0.11 has a File Upload vulnerability in the installTheme function...

CVE-2025-60735

PerfreeBlog v4.0.11 has a File Upload vulnerability in the installPlugin function...

CVE-2025-60730

PerfreeBlog v4.0.11 has an arbitrary file deletion vulnerability in the unInstallTheme function...

CVE-2025-60729

PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath function...

CVE-2025-60730

PerfreeBlog v4.0.11 has an arbitrary file deletion vulnerability in the unInstallTheme function...

PT-2025-43662

Name of the Vulnerable Software and Affected Versions PerfreeBlog version 4.0.11 Description PerfreeBlog version 4.0.11 contains an arbitrary file read issue within the validThemeFilePath function. This allows for unauthorized access to files. Recommendations Update to a newer version that contai...

PT-2025-43664

Name of the Vulnerable Software and Affected Versions PerfreeBlog version 4.0.11 Description PerfreeBlog version 4.0.11 contains a File Upload issue within the installPlugin function. This allows for potential unauthorized file uploads. Recommendations Update to a newer version that contains a fi...

PT-2025-43663

Name of the Vulnerable Software and Affected Versions PerfreeBlog version 4.0.11 Description PerfreeBlog version 4.0.11 contains a File Upload issue within the installTheme function. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

CVE-2025-60731

The PerfreeBlog open-source Java-based blog/CMS platform, specifically version 4.0.11 , contains a File Upload vulnerability within the installTheme function. This flaw allows for the unrestricted upload of files with dangerous types. No patched version or specific remediation is currently docume...

CVE-2025-60735

PerfreeBlog v4.0.11 has a File Upload vulnerability in the installPlugin function...

CVE-2025-60731: Unrestricted Upload of File with Dangerous Type

PerfreeBlog v4.0.11 has a File Upload vulnerability in the installTheme function...

CVE-2025-60730: Incomplete Cleanup

PerfreeBlog v4.0.11 has an arbitrary file deletion vulnerability in the unInstallTheme function...

CVE-2025-60729: Buffer Over-read

PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath function...

CVE-2025-60735

PerfreeBlog v4.0.11 has a File Upload vulnerability in the installPlugin function...

CVE-2025-60731

PerfreeBlog v4.0.11 has a File Upload vulnerability in the installTheme function...

CVE-2025-60730

PerfreeBlog v4.0.11 has an arbitrary file deletion vulnerability in the unInstallTheme function...

CVE-2025-60730

PerfreeBlog version 4.0.11 , a Java-based blog/CMS building platform, contains an arbitrary file deletion vulnerability. This flaw exists within the unInstallTheme function, allowing an attacker to delete files on the system. Practical consequences include unauthorized data loss or system instabi...