{"items":[{"id":"CVE-2024-13362","published":"2026-05-01T05:29:54.148Z","updated":"2026-05-01T13:23:26.723Z","title":"Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter","severity":"MEDIUM","score":6.1,"vendor":"sebet","product":"Go Fetch Jobs (for WP Job Manager)","kev":false,"epss":0.00276,"kevAdded":null,"exploit":false},{"id":"CVE-2024-10664","published":"2024-12-04T07:32:25.555Z","updated":"2026-04-08T16:47:02.916Z","title":"Knowledge Base documentation & wiki plugin – BasePress Docs <= 2.16.3.3 - Missing Authorization to Authenticated (Subscriber+) Database Update","severity":"MEDIUM","score":4.3,"vendor":"codesavory","product":"Knowledge Base documentation & wiki plugin – BasePress Docs","kev":false,"epss":0.00274,"kevAdded":null,"exploit":false},{"id":"CVE-2022-4974","published":"2024-10-16T06:43:30.014Z","updated":"2026-04-08T16:46:54.861Z","title":"Freemius SDK <= 2.4.2 - Missing Authorization Checks","severity":"MEDIUM","score":6.3,"vendor":"dashlabsltd","product":"YASR – Yet Another Star Rating Plugin for WordPress","kev":false,"epss":0.00442,"kevAdded":null,"exploit":false},{"id":"CVE-2024-33588","published":"2024-04-29T12:39:18.151Z","updated":"2026-04-28T16:09:43.950Z","title":"WordPress basepress plugin <= 2.16.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"codeSavory","product":"Knowledge Base documentation & wiki plugin – BasePress","kev":false,"epss":0.00387,"kevAdded":null,"exploit":false},{"id":"CVE-2024-33590","published":"2024-04-29T10:14:05.596Z","updated":"2026-04-28T16:09:44.103Z","title":"WordPress basepress plugin <= 2.16.1 - Server Side Request Forgery (SSRF) vulnerability","severity":"MEDIUM","score":5,"vendor":"codeSavory","product":"Knowledge Base documentation & wiki plugin – BasePress","kev":false,"epss":0.0035,"kevAdded":null,"exploit":false}]}