Threats affecting pkg:github/perfreeblog/PerfreeBlog

5 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5	EPSS 0.3%	CVE-2025-60319PerfreeBlog · Server-Side Request Forgery (SSRF) Medium6.5EPSS 0.3%2025-10-30CVE Database V5CVE-2025-60319 PerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery due to a missing authorization check in the uploadAttachByUrl API endpoint (AttachController.java). EPSS 0.3%Vulnerability CWE-918	CVE Database V5	2025-10-30
High	7.6	EPSS 0.3%	CVE-2025-60730 · PerfreeBlog v4.0.11 has an arbitrary file deletion High7.6EPSS 0.3%2025-10-24CVE Database V5 PerfreeBlog v4.0.11 has an arbitrary file deletion vulnerability in the unInstallTheme function EPSS 0.3%Vulnerability CWE-459	CVE Database V5	2025-10-24
High	7.6	EPSS 0.3%	CVE-2025-60735 · PerfreeBlog v4.0.11 has a File Upload High7.6EPSS 0.3%2025-10-24CVE Database V5 PerfreeBlog v4.0.11 has a File Upload vulnerability in the installPlugin function EPSS 0.3%Vulnerability CWE-434	CVE Database V5	2025-10-24
High	7.6	EPSS 0.3%	CVE-2025-60731 · PerfreeBlog v4.0.11 has a File Upload High7.6EPSS 0.3%2025-10-24CVE Database V5 PerfreeBlog v4.0.11 has a File Upload vulnerability in the installTheme function EPSS 0.3%Vulnerability CWE-434	CVE Database V5	2025-10-24
Medium	5.3	EPSS 0.3%	CVE-2025-60729 · PerfreeBlog v4.0.11 has an arbitrary file read Medium5.3EPSS 0.3%2025-10-24CVE Database V5 PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath function EPSS 0.3%Vulnerability CWE-126	CVE Database V5	2025-10-24

Page 1 of 1