CyberSecBulletin

Typecho vulnerabilities

We track 2 vulnerabilities in Typecho products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 26, 2026.

2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score

Latest Typecho vulnerabilities

  • 7.3 High severity

    Typecho: Server-Side Request Forgery

    CVE-2026-7025Typecho

    A vulnerability was found in Typecho up to 1.3.0. This vulnerability affects the function Service::sendPingHandle of the file var/Widget/Service.php of the component Ping Back Service Endpoint. The manipulation of the argument X-Pingback/link results in server

  • 8.8 High severity

    Typecho: Unrestricted Upload of File with Dangerous Type

    CVE-2023-36299TypechoEPSS 1.81%

    A File Upload vulnerability in typecho v.1.2.1 allows a remote attacker to execute arbitrary code via the upload and options-general parameters in index.php.