Perfree Perfreeblog vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Perfree Perfreeblog: 5 record(s), with affected versions and fixes.cpe:2.3:a:perfree:perfreeblog
CVE-2025-60319
Medium · 6.5
CWE-918 Oct 30, 2025
Server-Side Request Forgery (SSRF) in Perfree Perfreeblog
PerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery due to a missing authorization check in the uploadAttachByUrl API endpoint (AttachController.java).
CVE-2025-60735
High · 7.6
CWE-434 Oct 24, 2025
Unrestricted Upload of File with Dangerous Type in Perfree Perfreeblog
PerfreeBlog v4.0.11 has a File Upload vulnerability in the installPlugin function
CVE-2025-60731
High · 7.6
CWE-434 Oct 24, 2025
Unrestricted Upload of File with Dangerous Type in Perfree Perfreeblog
PerfreeBlog v4.0.11 has a File Upload vulnerability in the installTheme function
CVE-2025-60730
High · 7.6
CWE-459 Oct 24, 2025
PerfreeBlog v4.0.11 has an arbitrary file deletion vulnerability in the unInstallTheme…
PerfreeBlog v4.0.11 has an arbitrary file deletion vulnerability in the unInstallTheme function
CVE-2025-60729
Medium · 5.3
CWE-126 Oct 24, 2025
PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath…
PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath function