Read the docs

BasePress

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

BasePress records in CISA KEV

No BasePress vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2024-35078 CVE-2024-52407 · GHSA-mhmv-qr4x-4qpx

WordPress BasePress Migration Tools plugin <= 1.0.0 - Arbitrary File Upload vulnerability

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in BasePress BasePress Migration Tools basepress-migration-tools allows Upload a Web Shell to a Web Server.This issue affects BasePress Migration Tools: from…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00492 Published 2024-11-16 No fix listed CWE-434
TI-2025-38950 CVE-2025-62761 · GHSA-j42c-hx2r-xfgj

Cross-site scripting in BasePress Knowledge Base documentation & wiki plugin – BasePress

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BasePress Knowledge Base documentation & wiki plugin – BasePress basepress allows Stored XSS.This issue affects Knowle…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00169 Published 2025-12-31 No fix listed CWE-79
Open these records in search →