Priority HIGH 74
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
Vulnerabilities
66 records
Priority HIGH 82
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
Priority HIGH 73
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
TI-2026-39909 CVE-2026-55232
Vvveb: Server-side request forgery in Vvveb via IPv6 bypass of validateUrl() in editor oEmbed proxy
Priority HIGH 66
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
TI-2026-39907 CVE-2026-55230
Vvveb: Stored XSS in Vvveb via sanitizeHTML() filter bypass using a quoted greater-than character
Priority HIGH 73
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
TI-2026-39908 CVE-2026-55231
Vvveb: Path traversal in Vvveb via sanitizeFileName() bypass enables arbitrary file read and delete through backup tools
Priority HIGH 67
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
Priority HIGH 66
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
TI-2026-39444 CVE-2026-54612
Vvveb: Authenticated editor path traversal to PHP file write/RCE via data-v-save-global
Priority MEDIUM 41
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
TI-2026-39445 CVE-2026-54613
Vvveb: Path Traversal in Revision Backup Reader/Deleter via Unsanitized theme Parameter
Priority MEDIUM 58
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
Priority LOW 37
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
TI-2026-36424 CVE-2026-49223
Authorization bypass in givanz Vvveb
Priority HIGH 66
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
TI-2026-36425 CVE-2026-49224
Vvveb post revision authorization bypass allows Authors to read, restore, or delete other Authors' post revisions
Priority HIGH 71
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
TI-2026-36423 CVE-2026-49222
Authorization bypass in givanz Vvveb
Priority HIGH 66
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
TI-2026-36426 CVE-2026-49225
Vvveb product revision authorization bypass allows Vendors to read, restore, or delete other Vendors' product revisions
Priority LOW 39
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
TI-2026-36429 CVE-2026-49228
Vvveb product authorization bypass allows Vendors to read, duplicate, or delete other Vendors' products
Priority HIGH 73
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
TI-2026-36427 CVE-2026-49226
Vvveb post authorization bypass allows Authors to view, duplicate, or delete other Authors' posts
Priority HIGH 69
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
TI-2026-36428 CVE-2026-49227
Vvveb comment authorization bypass allows Authors to read, approve, edit, or delete comments under other Authors' posts
Priority LOW 34
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
TI-2026-36422 CVE-2026-49221
Vvveb digital asset authorization bypass allows Vendors to list, read, edit, or delete other Vendors' digital assets
Priority HIGH 73
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
Priority HIGH 66
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
TI-2026-34121 CVE-2026-46407
Vvveb: admin/auth-token IDOR allows unauthorized disclosure of administrator REST API tokens
Priority HIGH 70
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
TI-2026-33535 CVE-2026-45800
Vvveb: Authenticated SQL injection in /user/orders via order_by and direction
Priority HIGH 73
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
TI-2026-33366 CVE-2026-45622
Vvveb: Unauthenticated reflected XSS in public product return form via customer_order_id
Priority MEDIUM 57
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
Priority MEDIUM 56
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
TI-2026-32709 CVE-2026-44826
Vvveb: Vvveb CMS — Negative-quantity cart manipulation allows creation of orders with negative grand totals
Priority HIGH 72
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.
TI-2026-32324 CVE-2026-44366
Vvveb: Stored XSS via Comment Author Field
Priority MEDIUM 60
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.