Priority HIGH 82
An arbitrary file upload vulnerability in the component /views/plugin.php of emlog pro v2.5.7 allows attackers to execute arbitrary code via uploading a crafted PHP file.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00766 · Published 2025-03-19 · No fix listed CWE-94
Priority HIGH 82
An arbitrary file upload vulnerability in the component admin\plugin.php of Emlog Pro v2.5.3 allows attackers to execute arbitrary code via uploading a crafted Zip file.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00705 · Published 2025-02-26 · No fix listed CWE-434
Priority HIGH 82
An arbitrary file upload vulnerability in the component /admin/plugin.php of Emlog Pro v2.2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.20418 · Published 2023-10-03 · No fix listed CWE-434
Priority HIGH 82
Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code via the cache.php component.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01967 · Published 2023-09-26 · No fix listed CWE-502
Priority HIGH 81
Emlog is an open source website building system.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00745 · Published 2026-01-12 · No fix listed CWE-434
Priority HIGH 80
Emlog is an open source website building system.
CVSS 4.0HIGH 8.9· Network · No auth · No interaction · EPSS 0.00766 · Published 2025-05-15 · Fixed in 2.5.10 CWE-434
Priority HIGH 73
Emlog is an open source website building system.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00809 · Published 2025-05-15 · No fix listed CWE-89
Priority HIGH 73
Emlog is an open source website building system.
CVSS 4.0HIGH 7.7· Network · No auth · No interaction · EPSS 0.00558 · Published 2025-03-28 · No fix listed CWE-89
Priority HIGH 72
Emlog Pro 2.5.20 has an arbitrary file deletion vulnerability.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00728 · Published 2025-12-08 · No fix listed CWE-24
Priority HIGH 71
Emlog is an open source website building system.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00195 · Published 2026-04-03 · Fixed in 2.6.8 CWE-352
Priority HIGH 71
Emlog is an open source website building system.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00216 · Published 2025-10-10 · No fix listed CWE-352
Priority HIGH 70
A vulnerability has been found in Emlog Pro 2.5.11 and classified as critical.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.0059 · Published 2025-05-23 · No fix listed CWE-74
Priority HIGH 69
Emlog is an open source website building system.
CVSS 3.1HIGH 8.2· Network · No auth · User interaction · EPSS 0.00411 · Published 2025-07-16 · No fix listed CWE-79
Priority HIGH 67
The template upload feature in Emlog Pro v2.6.9 has a path traversal vulnerability, allowing authenticated administrators to execute arbitrary PHP code.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00782 · Published 2026-05-29 · No fix listed CWE-22
Priority HIGH 67
Emlog is an open source website building system.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0089 · Published 2026-04-03 · No fix listed CWE-22
Priority HIGH 67
Emlog Pro V2.5.7 is vulnerable to Unrestricted Upload of File with Dangerous Type via /emlog/admin/plugin.php?action=upload_zip
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00793 · Published 2025-08-01 · No fix listed CWE-434
Priority HIGH 67
A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the article header at /admin/article.php.
CVSS 3.1HIGH 7.3· Local · No auth · User interaction · EPSS 0.0019 · Published 2025-02-26 · No fix listed CWE-79
Priority HIGH 67
emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.02513 · Published 2023-08-03 · No fix listed CWE-89
Priority HIGH 66
Emlog is an open source website building system.
CVSS 3.1HIGH 7.6· Network · Low privileges · User interaction · EPSS 0.00249 · Published 2025-10-03 · Fixed in 2.5.22 CWE-79
Priority HIGH 66
A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Titile in the article category section.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00189 · Published 2025-02-26 · No fix listed CWE-79
Priority HIGH 65
Emlog is an open source website building system.
CVSS 3.1HIGH 7.3· Network · Low privileges · User interaction · EPSS 0.00175 · Published 2026-03-11 · No fix listed CWE-352
Priority MEDIUM 64
Emlog is an open source website building system.
CVSS 3.1MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.00356 · Published 2026-04-03 · No fix listed CWE-89
Priority MEDIUM 64
Emlog is an open source website building system.
CVSS 3.1MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.00531 · Published 2026-04-03 · No fix listed CWE-98
Priority MEDIUM 64
Emlog is an open source website building system.
CVSS 3.1MEDIUM 6.9· Network · High privileges · User interaction · EPSS 0.00316 · Published 2025-07-16 · No fix listed CWE-79
Priority MEDIUM 64
A vulnerability, which was classified as problematic, has been found in Emlog Pro up to 2.4.1.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00417 · Published 2024-12-21 · No fix listed CWE-79
Load more
THREATIST.IORead the docs