CVE-2025-60729

21th percentile - higher than 21% of all known CVEs

PerfreeBlog version 4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath function. It allows an attacker to read arbitrary files on the server.

The risk involves potential leakage of sensitive data such as configuration files, passwords, or source code, which could lead to further attacks on the system.

It is recommended to immediately update PerfreeBlog to the latest version that fixes this vulnerability and restrict access to the application to trusted users only.