Login Request a demo
GI
Vendor
givanz
2 products with CVEs on record
55
CVEs
0
On KEV
4
New 30D
Products
VV
Vvveb
givanz
9.8
51 CVEs0 on KEV4 new
VV
Vvvebjs
givanz
6.5
4 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-112904
New
VV
Vvveb
givanz
8.7
0%
Oct 23Vvveb: Path Traversal in nextRestore() and nextBackup()
CVE-2026-55232
VV
Vvveb
givanz
7.6
0%
Oct 1Vvveb: Server-side request forgery in Vvveb via IPv6 bypass of validateUrl() in editor oEmbed proxy
CVE-2026-55230
VV
Vvveb
givanz
8.7
0%
Oct 1Vvveb: Stored XSS in Vvveb via sanitizeHTML() filter bypass using a quoted greater-than character
CVE-2026-55231
VV
Vvveb
givanz
7.2
1%
Oct 1Vvveb: Path traversal in Vvveb via sanitizeFileName() bypass enables arbitrary file read and delete through backup tools
CVE-2026-54506
VV
Vvveb
givanz
7.6
0%
Sep 17Vvveb: Stored XSS via sanitizeHTML() bypass in user profile bio field
CVE-2026-54612
VV
Vvveb
givanz
8.8
1%
Sep 17Vvveb: Authenticated editor path traversal to PHP file write/RCE via data-v-save-global
CVE-2026-54613
VV
Vvveb
givanz
5.4
0%
Sep 17Vvveb: Path Traversal in Revision Backup Reader/Deleter via Unsanitized theme Parameter
CVE-2026-54507
VV
Vvveb
givanz
8.4
0%
Sep 17Vvveb oEmbedProxy vulnerable to server-side request forgery
CVE-2026-49223
VV
Vvveb
givanz
7.6
0%
Aug 18Vvveb product review authorization bypass allows Vendors to read, approve, edit, or delete reviews under other Vendors' products
CVE-2026-49224
VV
Vvveb
givanz
8.3
0%
Aug 18Vvveb post revision authorization bypass allows Authors to read, restore, or delete other Authors' post revisions
CVE-2026-49222
VV
Vvveb
givanz
7.6
0%
Aug 18Vvveb product question authorization bypass allows Vendors to read, approve, edit, or delete questions under other Vendors' products
CVE-2026-49225
VV
Vvveb
givanz
8.3
0%
Aug 18Vvveb product revision authorization bypass allows Vendors to read, restore, or delete other Vendors' product revisions
CVE-2026-49228
VV
Vvveb
givanz
8.8
1%
Aug 18Vvveb product authorization bypass allows Vendors to read, duplicate, or delete other Vendors' products
CVE-2026-49226
VV
Vvveb
givanz
8.3
0%
Aug 18Vvveb post authorization bypass allows Authors to view, duplicate, or delete other Authors' posts
CVE-2026-49227
VV
Vvveb
givanz
7.6
0%
Aug 18Vvveb comment authorization bypass allows Authors to read, approve, edit, or delete comments under other Authors' posts
CVE-2026-49221
VV
Vvveb
givanz
8.8
1%
Aug 18Vvveb digital asset authorization bypass allows Vendors to list, read, edit, or delete other Vendors' digital assets
CVE-2026-46408
VV
Vvveb
givanz
7.6
0%
May 15Vvveb: checkout IDOR allows unauthorized reuse of another user's cart
CVE-2026-46407
VV
Vvveb
givanz
8.1
0%
May 15Vvveb: admin/auth-token IDOR allows unauthorized disclosure of administrator REST API tokens
CVE-2026-45800
VV
Vvveb
givanz
8.7
0%
May 15Vvveb: Authenticated SQL injection in /user/orders via order_by and direction
CVE-2026-45622
VV
Vvveb
givanz
5.3
0%
May 15Vvveb: Unauthenticated reflected XSS in public product return form via customer_order_id
CVE-2026-45616
VV
Vvveb
givanz
5.1
0%
May 15Vvveb: Stored XSS in Posts allows privilege escalation via post editor
CVE-2026-44826
VV
Vvveb
givanz
7.5
0%
May 15Vvveb: Vvveb CMS — Negative-quantity cart manipulation allows creation of orders with negative grand totals
CVE-2026-44366
VV
Vvveb
givanz
6.1
0%
May 15Vvveb: Stored XSS via Comment Author Field
CVE-2026-41937
VV
Vvveb
givanz
7.2
0%
May 14Vvveb < 1.0.8.3 Unrestricted File Upload RCE via Plugin Upload
CVE-2026-41935
VV
Vvveb
givanz
7.1
0%
May 14Vvveb < 1.0.8.3 Uncontrolled Recursion Denial of Service
CVE-2026-41933
VV
Vvveb
givanz
5.3
0%
May 14Vvveb < 1.0.8.3 Directory Listing Information Disclosure
CVE-2026-41932
VV
Vvveb
givanz
6.1
0%
May 14Vvveb < 1.0.8.3 Stored XSS via Signup Controller
CVE-2026-41928
VV
Vvveb
givanz
5.3
0%
May 7Vvveb < 1.0.8.2 Information Disclosure via Cron Controller
CVE-2026-41929
VV
Vvveb
givanz
6.1
0%
May 7Vvveb < 1.0.8.2 Unauthenticated Reflected XSS via Visual Editor
CVE-2026-41938
VV
Vvveb
givanz
8.8
1%
May 6Vvveb < 1.0.8.2 RCE via Media Upload Handler
CVE-2026-41930
VV
Vvveb
givanz
9.8
0%
May 6Vvveb < 1.0.8.2 Hard-coded Credentials Information Disclosure via phpMyAdmin
CVE-2026-41931
VV
Vvveb
givanz
5.3
0%
May 6Vvveb < 1.0.8.2 Information Disclosure via Debug Exception Handler
CVE-2026-41934
VV
Vvveb
givanz
8.8
1%
May 6Vvveb < 1.0.8.2 Authenticated RCE via Code Editor
CVE-2026-41936
VV
Vvveb
givanz
8.1
0%
May 6Vvveb < 1.0.8.2 XML External Entity Injection via Import
CVE-2026-39918
VV
Vvveb
givanz
9.8
1%
Apr 20Vvveb < 1.0.8.1 Code Injection via Installation Endpoint
CVE-2026-34428
VV
Vvveb
givanz
7.7
0%
Apr 20Vvveb < 1.0.8.1 SSRF via oEmbedProxy
CVE-2026-34427
VV
Vvveb
givanz
8.8
1%
Apr 20Vvveb < 1.0.8.1 Privilege Escalation via admin/user/save
CVE-2026-34429
VV
Vvveb
givanz
5.4
0%
Apr 20Vvveb < 1.0.8.1 Stored XSS via Media Upload and Rename
CVE-2026-5615
VV
Vvvebjs
givanz
4.3
1%
Apr 6givanz Vvvebjs File Upload Endpoint upload.php cross site scripting
CVE-2025-11029
VV
Vvveb
givanz
8.8
0%
Sep 26givanz Vvveb cross-site request forgery
CVE-2025-11028
VV
Vvveb
givanz
7.5
1%
Sep 26givanz Vvveb Image information disclosure
CVE-2025-11027
VV
Vvveb
givanz
5.4
0%
Sep 26givanz Vvveb SVG File cross site scripting
CVE-2025-11026
VV
Vvveb
givanz
7.5
0%
Sep 26givanz Vvveb Configuration File information disclosure
CVE-2025-9728
VV
Vvveb
givanz
6.1
0%
Aug 31givanz Vvveb login.tpl cross site scripting
CVE-2025-9397
VV
Vvveb
givanz
9.8
1%
Aug 24givanz Vvveb media.php unrestricted upload
CVE-2025-8976
VV
Vvveb
givanz
5.4
0%
Aug 14givanz Vvveb Endpoint post cross site scripting
CVE-2025-8975
VV
Vvveb
givanz
5.4
0%
Aug 14givanz Vvveb edit.tpl cross site scripting
CVE-2025-8522
VV
Vvvebjs
givanz
5.0
0%
Aug 4givanz Vvvebjs node.js save.php path traversal
CVE-2025-8521
VV
Vvveb
givanz
5.4
0%
Aug 4givanz Vvveb Add Type post-types cross site scripting
CVE-2025-8520
VV
Vvveb
givanz
4.7
0%
Aug 4givanz Vvveb Drag-and-Drop Editor editor server-side request forgery
CVE-2025-8519
VV
Vvveb
givanz
2.7
0%
Aug 4givanz Vvveb Drag-and-Drop Editor editor information disclosure
CVE-2025-8518
VV
Vvveb
givanz
7.2
2%
Aug 4givanz Vvveb Code Editor code.php save code injection
CVE-2025-8517
VV
Vvveb
givanz
6.3
2%
Aug 4givanz Vvveb session fixiation
CVE-2024-29272
VV
Vvvebjs
Givanz
6.5
9%
Mar 22Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute arbitrary code and obtain sensitive information via the…
CVE-2024-29271
VV
Vvvebjs
Givanz
6.1
1%
Mar 22Reflected Cross-Site Scripting (XSS) vulnerability in VvvebJs before version 1.7.7, allows remote attackers to execute arbitrary code and obtain sensitive information via the…