[ Vendor · 8 CVEs ]
baserproject
CVEs affecting baserproject published in the last 30 days, plus any baserproject CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-115479 | 23 Oct 2026 | CVSS 5.3 | baserproject basercmsbaserCMS is a website development framework. In versions 5.2.5 before 5.3.2 and 5.4.0 before 5.4.2, an unauthenticated visitor can supply a… | |
| CVE-2026-115480 | 23 Oct 2026 | CVSS 5.3 | baserproject basercmsbaserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, the public POST… | |
| CVE-2026-115481 | 23 Oct 2026 | CVSS 8.5 | baserproject basercmsbaserCMS is a website development framework. Starting in version 5.0.0-beta1 and prior to versions 5.3.2 and 5.4.2… | |
| CVE-2026-114621 | 23 Oct 2026 | CVSS 8.8 | baserproject basercmsbaserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, list and detail actions in the Admin and… | |
| CVE-2026-114622 | 23 Oct 2026 | CVSS 7.2 | baserproject basercmsbaserCMS is a website development framework. In versions 5.2.3 before 5.3.2 and 5.4.0 before 5.4.2, the optional BcThemeFile plugin's Admin API… | |
| CVE-2026-114623 | 23 Oct 2026 | CVSS 6.5 | baserproject basercmsbaserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, an authenticated user with only theme-file view… | |
| CVE-2026-114624 | 23 Oct 2026 | CVSS 7.2 | baserproject basercmsbaserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, the widget-area entity serializes widgets only… | |
| CVE-2026-115457 | 23 Oct 2026 | CVSS 7.1 | baserproject basercmsbaserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, global shortcode expansion runs over the complete… |