Products: 2
    Vulnerabilities: 19
    Known Exploited: 0
    2
    Critical Level Threats
    4
    High Level Threats
    10
    Medium Level Threats
    3
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-7025

    Typecho Ping Back Service Endpoint Service.php sendPingHandle server-side request forgery

    Last Modified: Apr 27, 2026
    Published: Apr 26, 2026

    CVE-2024-46494

    A cross-site scripting (XSS) vulnerability in Typecho v1.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into Name parameter under a comment for an Article.

    Last Modified: Apr 23, 2025
    Published: Apr 07, 2025

    CVE-2024-57369

    Clickjacking vulnerability in typecho v1.2.1.

    Last Modified: Apr 23, 2025
    Published: Jan 17, 2025

    CVE-2024-35540

    A stored cross-site scripting (XSS) vulnerability in Typecho v1.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

    Last Modified: Aug 21, 2024
    Published: Aug 20, 2024

    CVE-2024-35538

    Typecho v1.3.0 was discovered to contain a Client IP Spoofing vulnerability, which allows attackers to falsify their IP addresses by specifying an arbitrary IP as value of X-Forwarded-For or Client-Ip headers while performing HTTP requests.

    Last Modified: Apr 28, 2025
    Published: Aug 19, 2024
    Items Per Page
    Typecho Vulnerabilities & Security CVEs | CVE-DB