Extension WordPress
Vulnérabilités Knowledge Base documentation & wiki plugin – BasePress Docs
Cette page rassemble les failles publiées pour Knowledge Base documentation & wiki plugin – BasePress Docs, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Knowledge Base documentation & wiki plugin – BasePress Docs
6 fiches
Freemius <= 2.10.1 – Reflected DOM-Based Cross-Site Scripting via url Parameter
Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web…
*-2.16.3.3
2.16.3.6
30/04/2026
Knowledge Base documentation & wiki plugin – BasePress <= 2.17.0.1 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Knowledge Base documentation & wiki plugin – BasePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.17.0.1 due to insufficient input sanitization and output escaping. This makes it possible for…
*-2.17.0.1
2.17.0.2
31/12/2025
Knowledge Base documentation & wiki plugin – BasePress Docs <= 2.16.3.3 – Missing Authorization to Authenticated (Subscriber+) Database Update
The Knowledge Base documentation & wiki plugin – BasePress Docs plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the basepress_db_posts_update() function in all versions up to, and including, 2.16.3.3.…
*-2.16.3.3
2.16.3.4
03/12/2024
Knowledge Base documentation & wiki plugin – BasePress <= 2.16.1 – Authenticated (Subscriber+) Server-Side Request Forgery
The Knowledge Base documentation & wiki plugin – BasePress Docs plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.16.1 via the theme_style_render() function. This makes it possible for authenticated attackers,…
*-2.16.1
2.16.2.1
25/04/2024
Knowledge Base documentation & wiki plugin – BasePress <= 2.16.1 – Missing Authorization
The Knowledge Base documentation & wiki plugin – BasePress plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX actions in versions up to, and including, 2.16.1. This makes it possible…
*-2.16.1
2.16.2.1
25/04/2024
Freemius SDK <= 2.4.2 – Missing Authorization Checks
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions…
[*, 2.15.14)
2.15.14
04/03/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.