PerfreeBlog v4.0.11 has an arbitrary file deletion vulnerability in the unInstallTheme function
CVE-2025-60730
CVSS base score
7.6 (v3.1)
Severity
HIGH
Attack vector
Network
Weakness
CWE-459
Last modified
November 5, 2026
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
Affected products
perfree perfreeblog
References
- github.com Exploit, Third Party Advisory
- perfree.org.cn Product