CVE Tools
Track your stack

Baserproject

34 CVEs tracked since 2020. Since Aug 2020, none of them reached CISA KEV.

Baserproject CVEs per month

Aug 2020 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Baserproject CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2020-0830
2020-091 or fewer
2020-1030
2020-111 or fewer
2020-122 or fewer
2021-012 or fewer
2021-022 or fewer
2021-03no snapshot
2021-042 or fewer
2021-052 or fewer
2021-062 or fewer
2021-072 or fewer
2021-083 or fewer
2021-092 or fewer
2021-102 or fewer
2021-1120
2021-122 or fewer
2022-012 or fewer
2022-022 or fewer
2022-033 or fewer
2022-043 or fewer
2022-053 or fewer
2022-063 or fewer
2022-073 or fewer
2022-083 or fewer
2022-093 or fewer
2022-102 or fewer
2022-113 or fewer
2022-123 or fewer
2023-013 or fewer
2023-023 or fewer
2023-03no snapshot
2023-043 or fewer
2023-053 or fewer
2023-064 or fewer
2023-073 or fewer
2023-084 or fewer
2023-093 or fewer
2023-1050
2023-114 or fewer
2023-124 or fewer
2024-014 or fewer
2024-024 or fewer
2024-034 or fewer
2024-044 or fewer
2024-055 or fewer
2024-064 or fewer
2024-074 or fewer
2024-084 or fewer
2024-093 or fewer
2024-1040
2024-114 or fewer
2024-123 or fewer
2025-014 or fewer
2025-023 or fewer
2025-035 or fewer
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-0390
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-1080

Products

The products that kept showing up in Baserproject's monthly top three, with their CVEs summed over those months.

  1. Basercms347 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Baserproject.

  1. CVE-2026-115457baserCMS: Unauthenticated Stored XSS via Shortcode Expansion in Blog Comments7.1
  2. CVE-2026-114624baserCMS: PHP object injection via unguarded unserialize() in the widget-area entity7.2
  3. CVE-2026-114623baserCMS: Path traversal in the BcThemeFile admin screen allows file disclosure6.5
  4. CVE-2026-114622baserCMS: Encoded path traversal bypass in the theme file API7.2
  5. CVE-2026-114621baserCMS: SQL injection in the admin panel and admin API8.8
  6. CVE-2026-115480baserCMS: Public Web API mail-form submission bypasses image CAPTCHA5.3
  7. CVE-2026-115479baserCMS: Mail-form auto-replies accept multiple visitor-controlled recipients5.3
  8. CVE-2026-115481baserCMS: BcCustomContent file fields can be configured to allow executable file extensions such as php, leading to arbitrary PHP file upload—
  9. CVE-2026-76635baserCMS < 5.3.0 SQL Injection and Code Injection via BcDatabaseService.php7.2
  10. CVE-2026-32734baserCMS: Multiple vulnerabilities in baserCMS7.1
  11. CVE-2026-30879baserCMS: Cross-site scripting vulnerability in blog post6.1
  12. CVE-2026-30940baserCMS: Path Traversal in Theme File API Leads to Arbitrary File Write and RCE7.2
  13. CVE-2026-30878baserCMS: Mail Form Acceptance Bypass via Public API5.3
  14. CVE-2026-30877baserCMS: OS Command Injection in the baserCMS Update Functionality9.1
  15. CVE-2026-30880baserCMS: OS command injection vulnerability in installer9.8

The record

Peak rank
#91 in Aug 2020
Busiest month shown
Mar 2026, 9 CVEs
Months with a KEV entry
0 since Aug 2020
Monthly snapshots
7 since 2020
Baserproject's full record, month by month