Priority HIGH 82
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
givanz
Records66All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high28CVSS 7.0–8.9
Exploited now
givanz records in CISA KEVNo givanz vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
66 records
TI-2025-28570 CVE-2025-44022 · GHSA-5cxg-299x-c7pc
An issue in vvveb CMS v.1.0.6 allows a remote attacker to execute arbitrary code via the Plugin mechanism.
Priority HIGH 82
An issue in vvveb CMS v.1.0.6 allows a remote attacker to execute arbitrary code via the Plugin mechanism.
TI-2024-18282 CVE-2024-27480 · GHSA-2rqx-6v8j-7xmq
givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload.
Priority HIGH 82
givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload.
TI-2024-16622 CVE-2024-25182 · GHSA-wgr2-qr2w-94qw
givanz VvvebJs 1.7.2 suffers from a File Upload vulnerability via save.php.
Priority HIGH 82
givanz VvvebJs 1.7.2 suffers from a File Upload vulnerability via save.php.
TI-2024-16621 CVE-2024-25181 · GHSA-5r6q-cg35-jr9q
A critical vulnerability has been identified in givanz VvvebJs 1.7.2, which allows both…
Priority HIGH 80
A critical vulnerability has been identified in givanz VvvebJs 1.7.2, which allows both Server-Side Request Forgery (SSRF) and arbitrary file reading.
Priority HIGH 74
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
Priority HIGH 73
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
TI-2026-39907 CVE-2026-55230
Vvveb: Stored XSS in Vvveb via sanitizeHTML() filter bypass using a quoted greater-than character
Priority HIGH 73
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
TI-2026-36429 CVE-2026-49228
Vvveb product authorization bypass allows Vendors to read, duplicate, or delete other Vendors' products
Priority HIGH 73
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
TI-2026-36422 CVE-2026-49221
Vvveb digital asset authorization bypass allows Vendors to list, read, edit, or delete other Vendors' digital assets
Priority HIGH 73
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
TI-2026-33535 CVE-2026-45800
Vvveb: Authenticated SQL injection in /user/orders via order_by and direction
Priority HIGH 73
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
TI-2026-30340 CVE-2026-41938
Vvveb < 1.0.8.2 RCE via Media Upload Handler
Priority HIGH 73
Vvveb before version 1.0.8.2 contains an unrestricted file upload vulnerability in the media upload handler that allows authenticated users with media-upload permissions to bypass extension restrictions by uploading a .h…
TI-2026-32709 CVE-2026-44826
Vvveb: Vvveb CMS — Negative-quantity cart manipulation allows creation of orders with negative grand totals
Priority HIGH 72
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
Priority HIGH 72
Vvveb before version 1.0.8.2 contains an XML external entity (XXE) injection vulnerability in the admin Tools/Import feature that allows authenticated site_admin users to read arbitrary files and modify database records.
TI-2026-36425 CVE-2026-49224
Vvveb post revision authorization bypass allows Authors to read, restore, or delete other Authors' post revisions
Priority HIGH 71
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
TI-2026-34121 CVE-2026-46407
Vvveb: admin/auth-token IDOR allows unauthorized disclosure of administrator REST API tokens
Priority HIGH 70
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
Priority HIGH 70
Vvveb before version 1.0.8.2 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain sensitive server information by triggering unhandled exceptions in the password-reset module.
TI-2025-10098 CVE-2025-11028 · GHSA-qwjm-mhvw-4733
givanz Vvveb Image information disclosure
Priority HIGH 70
A security flaw has been discovered in givanz Vvveb up to 1.0.7.2.
TI-2026-36427 CVE-2026-49226
Vvveb post authorization bypass allows Authors to view, duplicate, or delete other Authors' posts
Priority HIGH 69
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
TI-2026-39908 CVE-2026-55231
Vvveb: Path traversal in Vvveb via sanitizeFileName() bypass enables arbitrary file read and delete through backup tools
Priority HIGH 67
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
TI-2026-39909 CVE-2026-55232
Vvveb: Server-side request forgery in Vvveb via IPv6 bypass of validateUrl() in editor oEmbed proxy
Priority HIGH 66
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
Priority HIGH 66
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
TI-2026-36424 CVE-2026-49223
Authorization bypass in givanz Vvveb
Priority HIGH 66
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
TI-2026-36423 CVE-2026-49222
Authorization bypass in givanz Vvveb
Priority HIGH 66
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
Priority HIGH 66
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.