All 4 CVE vulnerabilities found in Knowledge Base, with AI-generated Chinese analysis, references, and POCs.
Vendor: Ajay
| CVE ID | Title | CVSS | Severity | Paused |
|---|---|---|---|---|
| CVE-2025-60228 | WordPress Knowledge Base theme <= 2.9 - PHP Object Injection vulnerability CWE-502 | 8.8AI | HighAI | 2025-10-22 |
| CVE-2025-7431 | Knowledge Base <= 2.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Slug CWE-79 | 4.4 | Medium | 2025-07-18 |
| CVE-2025-5533 | Knowledge Base <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 | 6.4 | Medium | 2025-06-06 |
| CVE-2024-51677 | WordPress Knowledge Base plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability CWE-79 | 6.5 | Medium | 2024-11-04 |
All 4 known CVE vulnerabilities affecting Knowledge Base with full Chinese analysis, references, and POCs where available.