PatchTheCVEyifang vulnerabilities and fixes
Recent CVEs affecting yifang, with upgrade or downgrade steps. 13 tracked.
yifang has 13 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 9. Most recent: 2026-03-08. Highest priority: CVE-2025-45887 (score 51/100).
- CVE-2025-11136 MEDIUM 4.7 UPGRADE A flaw has been found in YiFang CMS up to 2.0.2
- CVE-2026-3743 LOW 3.5 DOWNGRADE A flaw has been found in YiFang CMS 2.0.5
- CVE-2026-3742 LOW 3.5 DOWNGRADE A vulnerability was detected in YiFang CMS 2.0.5
- CVE-2026-3741 LOW 3.5 DOWNGRADE A security vulnerability has been detected in YiFang CMS 2.0.5
- CVE-2026-2934 LOW 2.4 UPGRADE A security vulnerability has been detected in YiFang CMS up to 2.0.5
- CVE-2026-2933 LOW 2.4 UPGRADE A weakness has been identified in YiFang CMS up to 2.0.5
- CVE-2026-2932 LOW 2.4 UPGRADE A security flaw has been discovered in YiFang CMS up to 2.0.5
- CVE-2025-9400 MEDIUM 6.3 UPGRADE A flaw has been found in YiFang CMS up to 2.0.5
- CVE-2025-9399 MEDIUM 6.3 UPGRADE A vulnerability was detected in YiFang CMS up to 2.0.5
- CVE-2025-9398 MEDIUM 5.3 UPGRADE A security vulnerability has been detected in YiFang CMS up to 2.0.5
- CVE-2025-5383 LOW 2.4 UPGRADE A vulnerability was found in Yifang CMS up to 2.0.2 and classified as problematic
- CVE-2025-5381 LOW 2.7 UPGRADE A vulnerability, which was classified as problematic, was found in Yifang CMS up to 2.0.2
- CVE-2025-45887 CRITICAL 9.1 DOWNGRADE Yifang CMS v2.0.2 is vulnerable to Server-Side Request Forgery (SSRF) in /api/file/getRemoteContent.
FAQ
How do I fix yifang vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is yifang being exploited right now?
None of the tracked yifang CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which yifang CVE should I patch first?
CVE-2025-45887 currently ranks highest (51/100): Yifang CMS v2.0.2 is vulnerable to Server-Side Request Forgery (SSRF) in /api/file/getRemoteContent..