Threat database

5 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5	EPSS 0.3%	CVE-2025-60319PerfreeBlog · n/a Medium6.5EPSS 0.3%2025-10-30CVE Database V5CVE-2025-60319 PerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery due to a missing authorization check in the uploadAttachByUrl API endpoint (AttachController.java). EPSS 0.3%Vulnerability	CVE Database V5	2025-10-30
High	7.6	EPSS 0.3%	CVE-2025-60730PerfreeBlog · n/a High7.6EPSS 0.3%2025-10-24CVE Database V5CVE-2025-60730 PerfreeBlog v4.0.11 has an arbitrary file deletion vulnerability in the unInstallTheme function EPSS 0.3%Vulnerability	CVE Database V5	2025-10-24
High	7.6	EPSS 0.3%	CVE-2025-60735PerfreeBlog · n/a High7.6EPSS 0.3%2025-10-24CVE Database V5CVE-2025-60735 PerfreeBlog v4.0.11 has a File Upload vulnerability in the installPlugin function EPSS 0.3%Vulnerability	CVE Database V5	2025-10-24
High	7.6	EPSS 0.3%	CVE-2025-60731perfreeblog · n/a High7.6EPSS 0.3%2025-10-24CVE Database V5CVE-2025-60731 PerfreeBlog v4.0.11 has a File Upload vulnerability in the installTheme function EPSS 0.3%Vulnerability	CVE Database V5	2025-10-24
Medium	5.3	EPSS 0.3%	CVE-2025-60729PerfreeBlog · n/a Medium5.3EPSS 0.3%2025-10-24CVE Database V5CVE-2025-60729 PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath function EPSS 0.3%Vulnerability	CVE Database V5	2025-10-24

Page 1 of 1