Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.9

Blogzee allows upload of malicious files

CVE-2025-68910 · published 9 months ago
Summary

An attacker can upload any type of file to your website, potentially causing harm to your site or users. This is a security risk because malicious files can be used to compromise your website's security or spread malware. Update to Blogzee version 1.0.6 or later to fix this issue.

Original advisory text
Unrestricted Upload of File with Dangerous Type vulnerability in blazethemes Blogzee blogzee allows Using Malicious Files.This issue affects Blogzee: from n/a through <= 1.0.5.
Unrestricted Upload of File with Dangerous Type vulnerability in blazethemes Blogzee blogzee allows Using Malicious Files.This issue affects Blogzee: from n/a through <= 1.0.5.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.9 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-434Unrestricted File Upload
Timeline
Published22 Jan 2026
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-68910 · NVD
Track software like this
Free during beta