Knowledge Base
7 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Knowledge Base, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.
Knowledge Base CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 1 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 1 |
| 2025-07 | 1 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 3 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 7 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- High1
- Medium6
Latest CVEs
The 7 most recently published vulnerabilities affecting Knowledge Base.
- CVE-2025-60228WordPress Knowledge Base theme <= 2.9 - PHP Object Injection vulnerability8.8
- BDU:2025-13055Уязвимость компонента /mailbox/{mailbox_id}/knowledge-base модуля Knowledge Base системы управления службой поддержки FreeScout, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации5.4
- BDU:2025-13060Уязвимость модуля Knowledge Base системы управления службой поддержки FreeScout, позволяющая нарушителю проводить атаки межсайтового скриптинга (XSS)5.4
- CVE-2025-7431Knowledge Base <= 2.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Slug4.4
- CVE-2025-5533Knowledge Base <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4
- CVE-2024-51677WordPress Knowledge Base plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability6.5
- CVE-2008-3555Directory traversal vulnerability in index.php in (1) WSN Forum 4.1.43 and earlier, (2) Gallery 4.1.30 and earlier, (3) Knowledge Base (WSNKB) 4.1.36 and earlier, (4) Links 4.1.44 and earlier, and ...6.8
Product grouping is registry-driven, with AI assist and human review. How it works