Known Vulnerabilities for Blog Cms by Php
Listed below are 1 of the newest known vulnerabilities associated with "Blog Cms" by "Php".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-93901 json | The Optima Express IDX plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 8.7.5... | Not Provided | 2026-09-25 | 2026-09-25 |
| CVE-2026-90568 json | A vulnerability was detected in moxi624 Mogu Blog v2 up to 5.2. This affects the function BlogSortServiceImpl.addBlogSort of ... | Not Provided | 2026-09-13 | 2026-09-16 |
| CVE-2026-90567 json | A security vulnerability has been detected in quequnlong shiyi-blog up to 1.2.1. Affected by this issue is the function highl... | Not Provided | 2026-09-13 | 2026-09-15 |
| CVE-2026-90564 json | A vulnerability was identified in quequnlong shiyi-blog 1.0.0-1.2.1. This impacts the function SysChatMsgMapper.getChatMsgLis... | Not Provided | 2026-09-13 | 2026-09-14 |
| CVE-2026-90527 json | A vulnerability was detected in quequnlong shiyi-blog up to 1.2.1. Affected is an unknown function of the file blog-admin/src... | Not Provided | 2026-09-13 | 2026-09-16 |
| CVE-2026-89261 json | MoguBlog through 6.2 exposes Elasticsearch index management endpoints in the mogu_search service without authentication, allo... | Not Provided | 2026-09-11 | 2026-09-11 |
| CVE-2026-88904 json | The PuppyFW WordPress plugin through 0.4.4 does not have proper authorisation on one of its REST routes, which tests the call... | Not Provided | 2026-09-17 | 2026-09-17 |
| CVE-2026-88421 json | Incorrect access control in the BlogPage.get_entries() component of APSL puput v1.2.1 through v2.2.0 allows unauthenticated a... | Not Provided | 2026-09-25 | 2026-09-25 |
| CVE-2026-87727 json | a-blog cms Ver. 3.2.33 and earlier contains a path traversal vulnerability, which allows an unauthenticated attacker to read ... | Not Provided | 2026-09-11 | 2026-09-11 |
| CVE-2026-83628 json | The Theme My Login plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 7.1.15 on Mu... | Not Provided | 2026-09-05 | 2026-09-07 |