typecho vulnerabilities and fixes

Recent CVEs affecting typecho, with upgrade or downgrade steps. 2 tracked.

typecho has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-04-07. Highest priority: CVE-2024-57369 (score 30/100).

• CVE-2024-57369 MEDIUM 6.4 DOWNGRADE Clickjacking vulnerability in typecho v1.2.1.
• CVE-2024-46494 MEDIUM 5.4 DOWNGRADE A cross-site scripting (XSS) vulnerability in Typecho v1.2.1 allows attackers to execute arbitrary web scripts

FAQ

How do I fix typecho vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is typecho being exploited right now?

None of the tracked typecho CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which typecho CVE should I patch first?

CVE-2024-57369 currently ranks highest (30/100): Clickjacking vulnerability in typecho v1.2.1..

← Back to latest CVEs