https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-15458.htmlhttps://patchthecve.com/cve/CVE-2025-15458.htmlWed, 07 Oct 2026 11:10:00 +0000HIGH 7.3: A vulnerability was determined in bg5sbk MiniCMS up to 1.8. This affects an unknown function of the file /mc-admin/post-edit.php of the component Article Handler. Executing a manipulation can lead to improper authentication. It is possible to launch the attack remotely. The exploit has been publiclyhttps://patchthecve.com/cve/CVE-2025-15457.htmlhttps://patchthecve.com/cve/CVE-2025-15457.htmlWed, 07 Oct 2026 11:10:00 +0000HIGH 7.3: A vulnerability was found in bg5sbk MiniCMS up to 1.8. The impacted element is an unknown function of the file /minicms/mc-admin/post.php of the component Trash File Restore Handler. Performing a manipulation results in improper authentication. It is possible to initiate the attack remotely. The exphttps://patchthecve.com/cve/CVE-2025-15456.htmlhttps://patchthecve.com/cve/CVE-2025-15456.htmlWed, 07 Oct 2026 11:10:00 +0000HIGH 7.3: A vulnerability has been found in bg5sbk MiniCMS up to 1.8. The affected element is an unknown function of the file /mc-admin/page-edit.php of the component Publish Page Handler. Such manipulation leads to improper authentication. The attack may be performed from remote. The exploit has been discloshttps://patchthecve.com/cve/CVE-2025-15455.htmlhttps://patchthecve.com/cve/CVE-2025-15455.htmlWed, 07 Oct 2026 11:10:00 +0000MEDIUM 6.5: A flaw has been found in bg5sbk MiniCMS up to 1.8. Impacted is the function delete_page of the file /minicms/mc-admin/page.php of the component File Recovery Request Handler. This manipulation causes improper authentication. The attack is possible to be carried out remotely. The exploit has been pubhttps://patchthecve.com/cve/CVE-2024-9282.htmlhttps://patchthecve.com/cve/CVE-2024-9282.htmlWed, 17 Jun 2026 08:24:16 +0000MEDIUM 4.3: A vulnerability was found in bg5sbk MiniCMS 1.11. It has been classified as problematic. Affected is an unknown function of the file page-edit.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and mayhttps://patchthecve.com/cve/CVE-2024-9281.htmlhttps://patchthecve.com/cve/CVE-2024-9281.htmlWed, 17 Jun 2026 08:24:16 +0000MEDIUM 4.3: A vulnerability was found in bg5sbk MiniCMS up to 1.11 and classified as problematic. This issue affects some unknown processing of the file post-edit.php. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may