CVE-2026-124636

A security flaw in kevquirk PureBlog versions up to 3.7.2 allows for path traversal via the Page Editor component. The vulnerability exists in the save_page function of the includes/lib/content.php file, where a manipulated page slug argument can be exploited. Remote exploitation of this attack i...

CVE-2026-124635

A vulnerability exists in kevquirk PureBlog versions up to 3.7.2 within the Admin Image Upload Endpoint component. Specifically, an unknown function in the file admin/upload-image.php allows for unrestricted upload via remote manipulation. To remediate this issue, users should upgrade to version ...

EUVD-2026-120065

A security flaw has been discovered in kevquirk PureBlog up to 3.7.2. The affected element is the function savepage of the file includes/lib/content.php of the component Page Editor. Performing a manipulation of the argument page slug results in path traversal. Remote exploitation of the attack i...

EUVD-2026-120062

A vulnerability was identified in kevquirk PureBlog up to 3.7.2. Impacted is an unknown function of the file admin/upload-image.php of the component Admin Image Upload Endpoint. Such manipulation leads to unrestricted upload. The attack may be launched remotely. Upgrading to version 3.7.3 is...