z-blogphp vulnerabilities and fixes

Recent CVEs affecting z-blogphp, with upgrade or downgrade steps. 2 tracked.

Also searched as: z blogphp.

z-blogphp has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-01-06. Highest priority: CVE-2024-55529 (score 52/100).

• CVE-2024-55529 CRITICAL 9.8 DOWNGRADE Z-BlogPHP 1.7.3 is vulnerable to arbitrary code execution via \zb_users\theme\shell\template.
• CVE-2024-39203 MEDIUM 6.1 UPGRADE A cross-site scripting (XSS) vulnerability in the Backend Theme Management module of Z-BlogPHP v1.7.3 allows a

FAQ

How do I fix z-blogphp vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is z-blogphp being exploited right now?

None of the tracked z-blogphp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which z-blogphp CVE should I patch first?

CVE-2024-55529 currently ranks highest (52/100): Z-BlogPHP 1.7.3 is vulnerable to arbitrary code execution via \zb_users\theme\shell\template..

← Back to latest CVEs