VV
Product
Vvveb
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 8Low 1
Watch
Add Vvveb to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-9397 | 9.8 | Aug 24 | givanz Vvveb media.php unrestricted upload Affected: through 1.0.7.2 |
| CVE-2025-44022 | 9.8 | May 12 | An issue in vvveb CMS v.1.0.6 allows a remote attacker to execute arbitrary code via the Plugin mechanism Affected: 1.0.6 |
| CVE-2025-11029 | 8.8 | Sep 26 | givanz Vvveb cross-site request forgery Affected: through 1.0.7.2 |
| CVE-2025-11028 | 7.5 | Sep 26 | givanz Vvveb Image information disclosure Affected: through 1.0.7.2 |
| CVE-2025-11026 | 7.5 | Sep 26 | givanz Vvveb Configuration File information disclosure Affected: through 1.0.7.2 |
| CVE-2025-11944 | 7.2 | Oct 19 | givanz Vvveb Raw SQL import.php import sql injection Affected: 1.0.7.0; 1.0.7.1; 1.0.7.2; 1.0.7.3 |
| CVE-2025-8518 | 7.2 | Aug 4 | givanz Vvveb Code Editor code.php save code injection Affected: 1.0.5 |
| CVE-2025-8517 | 6.3 | Aug 4 | givanz Vvveb session fixiation Affected: before 1.0.7 |
| CVE-2025-9728 | 6.1 | Aug 31 | givanz Vvveb login.tpl cross site scripting Affected: 1.0.7.2 |
| CVE-2025-11027 | 5.4 | Sep 26 | givanz Vvveb SVG File cross site scripting Affected: through 1.0.7.2 |
| CVE-2025-8976 | 5.4 | Aug 14 | givanz Vvveb Endpoint post cross site scripting Affected: before 1.0.6 |
| CVE-2025-8975 | 5.4 | Aug 14 | givanz Vvveb edit.tpl cross site scripting Affected: before 1.0.6 |
| CVE-2025-8521 | 5.4 | Aug 4 | givanz Vvveb Add Type post-types cross site scripting Affected: before 1.0.6 |
| CVE-2025-12203 | 4.9 | Oct 27 | givanz Vvveb Code Editor functions.php sanitizeFileName path traversal Affected: 1.0.7.0; 1.0.7.1; 1.0.7.2; 1.0.7.3 |
| CVE-2025-8520 | 4.7 | Aug 4 | givanz Vvveb Drag-and-Drop Editor editor server-side request forgery Affected: before 1.0.6 |
| CVE-2025-8519 | 2.7 | Aug 4 | givanz Vvveb Drag-and-Drop Editor editor information disclosure Affected: before 1.0.6 |
Showing 16