Perfree
Vulnerability activity for Perfree: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 6.5MediumOct 30, 2025perfreeblog SSRFCVE-2025-60319PerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery due to a missing authorization check in the uploadAttachByUrl API endpoint (AttachController.java).
- 7.6HighOct 24, 2025perfreeblog Path traversal / file handlingCVE-2025-60735PerfreeBlog v4.0.11 has a File Upload vulnerability in the installPlugin function
- 7.6HighOct 24, 2025perfreeblog Path traversal / file handlingCVE-2025-60731PerfreeBlog v4.0.11 has a File Upload vulnerability in the installTheme function
- 7.6HighOct 24, 2025perfreeblog Path traversal / file handlingCVE-2025-60730PerfreeBlog v4.0.11 has an arbitrary file deletion vulnerability in the unInstallTheme function
- 5.3MediumOct 24, 2025perfreeblog Memory corruptionCVE-2025-60729PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath function
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.