Skip to contentPerfree Perfreeblog vulnerabilities
- perfree perfreeblogPerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery due to a missing authorization...CVE-2025-603196.5 Medium
- perfree perfreeblogPerfreeBlog v4.0.11 has a File Upload vulnerability in the installPlugin functionCVE-2025-607357.6 High
- perfree perfreeblogPerfreeBlog v4.0.11 has a File Upload vulnerability in the installTheme functionCVE-2025-607317.6 High
- perfree perfreeblogPerfreeBlog v4.0.11 has an arbitrary file deletion vulnerability in the unInstallTheme functionCVE-2025-607307.6 High
- perfree perfreeblogPerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath functionCVE-2025-607295.3 Medium
- perfree perfreeblogPerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the getThemeFileContent function.CVE-2025-294217.5 High
- perfree perfreeblogPerfreeBlog v4.0.11 has a directory traversal vulnerability in the getThemeFilesByName function.CVE-2025-294207.5 High
- perfree perfreeblogPerfreeBlog JWT JwtUtil hard-coded keyCVE-2025-51646.3 Medium
- perfree perfreeblogIn PerfreeBlog version 4.0.11, regular users can exploit the arbitrary file upload vulnerability...CVE-2025-292818.8 High
- perfree perfreeblogStored cross-site scripting vulnerability exists in PerfreeBlog v4.0.11 in the website name field...CVE-2025-292804.8 Medium
- perfree perfreeblogAn issue in Perfree PerfreeBlog v.3.1.2 allows a remote attacker to execute arbitrary code via...CVE-2023-408257.2 High
- perfree perfreeblogAn arbitrary file upload vulnerability in the component /admin/ThemeController.java of...CVE-2023-303339.8 Critical
- perfree perfreeblogCross Site Scripting (XSS) vulnerability in PerfreeBlog 3.1.2 allows attackers to execute...CVE-2023-296435.4 Medium
- perfree perfreeblogAn arbitrary file upload vulnerability in the /admin/user/uploadImg component of PerfreeBlog v3.1...CVE-2023-277579.8 Critical