Perfree vulnerabilities

Products

• Perfreeblog 14
• Go-fastdfs-web 3

Newest

• perfree go-fastdfs-web perfree go-fastdfs-web Installation Endpoint checkServer server-side request forgery CVE-2026-11437 6.9 MediumJune 6, 2026
• perfree go-fastdfs-web perfree go-fastdfs-web doInstall InstallController.java improper authorization CVE-2026-6105 6.9 MediumApril 11, 2026
• perfree go-fastdfs-web perfree go-fastdfs-web Apache Shiro RememberMe ShiroConfig.java rememberMeManager hard-coded key CVE-2026-3963 6.3 MediumMarch 11, 2026
• perfree perfreeblog PerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery due to a missing authorization... CVE-2025-60319 6.5 MediumOctober 30, 2025
• perfree perfreeblog PerfreeBlog v4.0.11 has a File Upload vulnerability in the installPlugin function CVE-2025-60735 7.6 HighOctober 24, 2025
• perfree perfreeblog PerfreeBlog v4.0.11 has a File Upload vulnerability in the installTheme function CVE-2025-60731 7.6 HighOctober 24, 2025
• perfree perfreeblog PerfreeBlog v4.0.11 has an arbitrary file deletion vulnerability in the unInstallTheme function CVE-2025-60730 7.6 HighOctober 24, 2025
• perfree perfreeblog PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath function CVE-2025-60729 5.3 MediumOctober 24, 2025
• perfree perfreeblog PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the getThemeFileContent function. CVE-2025-29421 7.5 HighAugust 25, 2025
• perfree perfreeblog PerfreeBlog v4.0.11 has a directory traversal vulnerability in the getThemeFilesByName function. CVE-2025-29420 7.5 HighAugust 25, 2025
• perfree perfreeblog PerfreeBlog JWT JwtUtil hard-coded key CVE-2025-5164 6.3 MediumMay 26, 2025
• perfree perfreeblog In PerfreeBlog version 4.0.11, regular users can exploit the arbitrary file upload vulnerability... CVE-2025-29281 8.8 HighApril 15, 2025
• perfree perfreeblog Stored cross-site scripting vulnerability exists in PerfreeBlog v4.0.11 in the website name field... CVE-2025-29280 4.8 MediumApril 15, 2025
• perfree perfreeblog An issue in Perfree PerfreeBlog v.3.1.2 allows a remote attacker to execute arbitrary code via... CVE-2023-40825 7.2 HighAugust 28, 2023
• perfree perfreeblog An arbitrary file upload vulnerability in the component /admin/ThemeController.java of... CVE-2023-30333 9.8 CriticalMay 18, 2023
• perfree perfreeblog Cross Site Scripting (XSS) vulnerability in PerfreeBlog 3.1.2 allows attackers to execute... CVE-2023-29643 5.4 MediumMay 1, 2023
• perfree perfreeblog An arbitrary file upload vulnerability in the /admin/user/uploadImg component of PerfreeBlog v3.1... CVE-2023-27757 9.8 CriticalMarch 15, 2023