CVE-2025-60319中 6.5PerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery due to a missing authorization check in the uploadAttachByUrl API endpoint …
CVE-2025-60735高 7.6PerfreeBlog v4.0.11 has a File Upload vulnerability in the installPlugin function
CVE-2025-60731高 7.6PerfreeBlog v4.0.11 has a File Upload vulnerability in the installTheme function
CVE-2025-60730高 7.6PerfreeBlog v4.0.11 has an arbitrary file deletion vulnerability in the unInstallTheme function
CVE-2025-60729中 5.3PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath function