Wanglongcn Yifang — known CVE vulnerabilities

Every CVE whose affected-product data names Wanglongcn Yifang, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2025-45887 — CVSS 9.1 (critical): Yifang CMS v2.0.2 is vulnerable to Server-Side Request Forgery (SSRF) in /api/file/getRemoteContent.
• CVE-2025-9400 — CVSS 6.3 (medium): A flaw has been found in YiFang CMS up to 2.0.5. This affects the function mergeMultipartUpload of the file app/utils/base/plugin/P_file.php…
• CVE-2025-9399 — CVSS 6.3 (medium): A vulnerability was detected in YiFang CMS up to 2.0.5. Affected by this issue is some unknown functionality of the file…
• CVE-2025-9398 — CVSS 5.3 (medium): A security vulnerability has been detected in YiFang CMS up to 2.0.5. Affected by this vulnerability is the function exportInstallTable of…
• CVE-2025-11136 — CVSS 4.7 (medium): A flaw has been found in YiFang CMS up to 2.0.2. The impacted element is the function webUploader of the file app/app/controller/File.php…
• CVE-2025-5381 — CVSS 2.7 (low): A vulnerability, which was classified as problematic, was found in Yifang CMS up to 2.0.2. Affected is the function downloadFile of the…
• CVE-2025-5383 — CVSS 2.4 (low): A vulnerability was found in Yifang CMS up to 2.0.2 and classified as problematic. Affected by this issue is some unknown functionality of…