CVE-2018-6656: Zblogcn Z-Blogphp

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Z-BlogPHP 1.5.1 has CSRF via zb_users/plugin/AppCentre/app_del.php, as demonstrated by deleting files and directories.

Affected products

• Zblogcn Z-Blogphp: version 1.5.1 only

Published 2018-02-06. Last modified 2026-06-17.