CVE-2018-8893: Zblogcn Z-Blogphp

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Z-BlogPHP 1.5.1 Zero has CSRF in plugin_edit.php, resulting in the ability to execute arbitrary PHP code.

Affected products

• Zblogcn Z-Blogphp: version 1.5.1 only

Published 2018-03-31. Last modified 2026-06-17.