Lucene search
PerfreePerfreeblog
3 matches found
CVE-2023-40825
An issue in Perfree PerfreeBlog v.3.1.2 allows a remote attacker to execute arbitrary code via crafted plugin listed in admin/plugin/access/list.
7.2CVSS7.2AI score0.00982EPSS
Web
CVE-2025-29420
PerfreeBlog v4.0.11 has a directory traversal vulnerability in the getThemeFilesByName function.
7.5CVSS7.2AI score0.0028EPSS
CVE-2025-29421
PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the getThemeFileContent function.
7.5CVSS7.2AI score0.0003EPSS