VV
Product
Vvveb
51
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 3High 30Medium 17Low 1
Watch
Add Vvveb to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-8517 | 6.3 | Aug 4 | givanz Vvveb session fixiation Affected: 1.0.6.1 |
| CVE-2026-44366 | 6.1 | May 15 | Vvveb: Stored XSS via Comment Author Field Affected: < 1.0.8.1 |
| CVE-2026-41932 | 6.1 | May 14 | Vvveb < 1.0.8.3 Stored XSS via Signup Controller Affected: before 1.0.8.3 |
| CVE-2026-41929 | 6.1 | May 7 | Vvveb < 1.0.8.2 Unauthenticated Reflected XSS via Visual Editor Affected: before 1.0.8.2 |
| CVE-2025-9728 | 6.1 | Aug 31 | givanz Vvveb login.tpl cross site scripting Affected: 1.0.7.2 |
| CVE-2026-54613 | 5.4 | Sep 17 | Vvveb: Path Traversal in Revision Backup Reader/Deleter via Unsanitized theme Parameter Affected: < 1.0.8.5 |
| CVE-2026-34429 | 5.4 | Apr 20 | Vvveb < 1.0.8.1 Stored XSS via Media Upload and Rename Affected: before 1.0.8.1 |
| CVE-2025-11027 | 5.4 | Sep 26 | givanz Vvveb SVG File cross site scripting Affected: 1.0.7.0; 1.0.7.1; 1.0.7.2 |
| CVE-2025-8976 | 5.4 | Aug 14 | givanz Vvveb Endpoint post cross site scripting Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.5 |
| CVE-2025-8975 | 5.4 | Aug 14 | givanz Vvveb edit.tpl cross site scripting Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.5 |
| CVE-2025-8521 | 5.4 | Aug 4 | givanz Vvveb Add Type post-types cross site scripting Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.5 |
| CVE-2026-45622 | 5.3 | May 15 | Vvveb: Unauthenticated reflected XSS in public product return form via customer_order_id Affected: < 1.0.8.3 |
| CVE-2026-41933 | 5.3 | May 14 | Vvveb < 1.0.8.3 Directory Listing Information Disclosure Affected: before 1.0.8.3 |
| CVE-2026-41928 | 5.3 | May 7 | Vvveb < 1.0.8.2 Information Disclosure via Cron Controller Affected: before 1.0.8.2 |
| CVE-2026-41931 | 5.3 | May 6 | Vvveb < 1.0.8.2 Information Disclosure via Debug Exception Handler Affected: before 1.0.8.2 |
| CVE-2026-45616 | 5.1 | May 15 | Vvveb: Stored XSS in Posts allows privilege escalation via post editor Affected: < 1.0.8.3 |
| CVE-2025-8520 | 4.7 | Aug 4 | givanz Vvveb Drag-and-Drop Editor editor server-side request forgery Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.5 |
Showing 17