Codesavory - vulnerabilities (CVEs)

6 CVEs in 3 products, 0 in the last 30 days, newest from 2026-05-01.

Products

CVE-2024-13362 - CVSS 6.1 (medium), 2026-05-01: Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient…
CVE-2024-10664 - CVSS 4.3 (medium), 2024-12-04: The Knowledge Base documentation & wiki plugin – BasePress Docs plugin for WordPress is vulnerable to unauthorized modification of data due to a missing…
CVE-2024-52407 - CVSS 9.9 (critical), 2024-11-16: Unrestricted Upload of File with Dangerous Type vulnerability in BasePress BasePress Migration Tools basepress-migration-tools allows Upload a Web Shell to a…
CVE-2022-4974 - CVSS 6.3 (medium), 2024-10-16: The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to…
CVE-2024-33588 - CVSS 5.4 (medium), 2024-04-29: Missing Authorization vulnerability in codeSavory Knowledge Base documentation & wiki plugin – BasePress.This issue affects Knowledge Base documentation &…
CVE-2024-33590 - CVSS 5 (medium), 2024-04-29: Server-Side Request Forgery (SSRF) vulnerability in codeSavory Knowledge Base documentation & wiki plugin – BasePress.This issue affects Knowledge Base…