Advisories · Technology

Typecho.

Every CVE that names Typecho among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-7025 CVE record

CVSS 6.9 Medium

Typecho Ping Back Service Endpoint Service.php sendPingHandle server-side request forgery
- Typecho
- Server-side request forgery (SSRF)
Not analysed yet 26 Apr 2026
CVE-2023-6615 CVE record

CVSS 3.5 Low

Typecho manage-users.php information disclosure
- Typecho
- Information disclosure
Not analysed yet 8 Dec 2023
CVE-2023-6614 CVE record

CVSS 2.7 Low

Typecho Page manage-pages.php backdoor
- Typecho
- CWE-912
Not analysed yet 8 Dec 2023
CVE-2023-6613 CVE record

CVSS 2.4 Low

Typecho Logo options-theme.php cross site scripting
- Typecho
- Cross-site scripting (XSS)
Not analysed yet 8 Dec 2023