Skip to content
Sign in
6.9 Medium

CVE-2026-7025 A vulnerability was found in Typecho up to 1.3.0

Description

A vulnerability was found in Typecho up to 1.3.0. This vulnerability affects the function Service::sendPingHandle of the file var/Widget/Service.php of the component Ping Back Service Endpoint. The manipulation of the argument X-Pingback/link results in server-side request forgery. The attack may be launched remotely. The exploit has been made public and could be used. Upgrading to version 1.3.1-rc is able to resolve this issue. The patch is identified as 96ccfdda4fc1e66ca04a003bf0c71d25864e6a0b. Upgrading the affected component is advised.

Affected products and versions

Product Affected versions Fixed in
Typecho 1.3.0 1.3.1-rc
Typecho 1.2 No fix stated
Typecho 1.1 No fix stated
Typecho 1.0 No fix stated

Other CVEs of Typecho

The 4 CVEs of Typecho →
CVE-2023-6615 A vulnerability, which was classified as problematic, has been found in Typecho 1.2.1 3.5 Low CVE-2023-6614 A vulnerability classified as problematic was found in Typecho 1.2.1 2.7 Low CVE-2023-6613 A vulnerability classified as problematic has been found in Typecho 1.2.1 2.4 Low
Track this CVE