GV
Vendor
Gvectors
72
CVEs
0
On KEV
0
New 30D
Products
WP10.0
wpDiscuz
gVectors
33 CVEs0 on KEV0 new
WF9.8
Wpforo Forum
Gvectors
29 CVEs0 on KEV0 new
WP9.8
Wpforo
Gvectors
5 CVEs0 on KEV0 new
WW8.8
Woodiscuz - Woocommerce Comments
Gvectors
2 CVEs0 on KEV0 new
DC4.8
Display Custom Fields – wpView
gVectors
1 CVEs0 on KEV0 new
WW7.2
wpForo + wpForo Advanced Attachments
gVectors
1 CVEs0 on KEV0 new
WP4.8
Wpview
Gvectors
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-22216 | WP wpDiscuz gVectors | 5.3 | Mar 13 | wpDiscuz before 7.6.47 - No Rate Limiting on Subscription Endpoints with LIKE Wildcard Bypass |
| CVE-2026-22215 | WP wpDiscuz gVectors | 5.4 | Mar 13 | wpDiscuz before 7.6.47 - Missing CSRF Protection on wpdGetFollowsPage |
| CVE-2026-22210 | WP wpDiscuz gVectors | 6.1 | Mar 13 | wpDiscuz before 7.6.47 - Cross-Site Scripting via Unescaped Attachment URLs |
| CVE-2026-22209 | WP wpDiscuz gVectors | 5.5 | Mar 13 | wpDiscuz before 7.6.47 - Cross-Site Scripting via Unescaped Custom CSS in Style Tag |
| CVE-2026-22204 | WP wpDiscuz gVectors | 5.3 | Mar 13 | wpDiscuz before 7.6.47 - Unsanitized Cookie Email Used as wp_mail() Recipient |
| CVE-2026-22203 | WP wpDiscuz gVectors | 4.9 | Mar 13 | wpDiscuz before 7.6.47 - Options Export Leaks OAuth Secrets in Plaintext |
| CVE-2026-22202 | WP wpDiscuz gVectors | 6.5 | Mar 13 | wpDiscuz before 7.6.47 - Destructive GET Action Deletes All Comments by Email |
| CVE-2026-22201 | WP wpDiscuz gVectors | 5.3 | Mar 13 | wpDiscuz before 7.6.47 - IP Address Spoofing in getIP() |
| CVE-2026-22199 | WP Wpdiscuz Gvectors | 7.5 | Mar 13 | Voltronic Power SNMP Web Pro 1.1 Path Traversal via upload.cgi |
| CVE-2026-22193 | WP wpDiscuz gVectors | 7.5 | Mar 13 | wpDiscuz before 7.6.47 - SQL Injection in getAllSubscriptions() |
| CVE-2026-22192 | WP Wpdiscuz Gvectors | 9.9 | Mar 13 | Voltronic Power SNMP Web Pro 1.1 Authentication Bypass via localStorage |
| CVE-2026-22191 | WP Wpdiscuz Gvectors | 5.2 | Mar 13 | Beghelli Sicuro24 SicuroWeb AngularJS Template Injection |
| CVE-2026-22183 | WP wpDiscuz gVectors | 5.4 | Mar 13 | wpDiscuz before 7.6.47 - Stored Cross-Site Scripting in Inline Comment Preview |
| CVE-2026-22182 | WP wpDiscuz gVectors | 7.5 | Mar 13 | wpDiscuz before 7.6.47 - Unauthenticated Email Notification Flood via wpdCheckNotificationType |
| CVE-2026-28562 | WF Wpforo Forum Gvectors | 9.8 | Feb 28 | wpForo Forum 2.4.14 SQL Injection via Topics ORDER BY Parameter |
| CVE-2026-28561 | WF Wpforo Forum Gvectors | 4.8 | Feb 28 | wpForo Forum 2.4.14 Stored XSS via Unescaped Forum Description in Templates |
| CVE-2026-28560 | WF Wpforo Forum Gvectors | 4.8 | Feb 28 | wpForo Forum 2.4.14 Stored XSS via Unsafe JSON Encoding in Inline Script |
| CVE-2026-28559 | WF Wpforo Forum Gvectors | 5.3 | Feb 28 | wpForo Forum 2.4.14 Information Disclosure via Global RSS Feed |
| CVE-2026-28558 | WF Wpforo Forum Gvectors | 5.4 | Feb 28 | wpForo Forum 2.4.14 Stored XSS via SVG Avatar File Upload |
| CVE-2026-28557 | WF Wpforo Forum Gvectors | 6.5 | Feb 28 | wpForo Forum < 2.4.16 Privilege Escalation via Role Synchronization Handler |
| CVE-2026-28556 | WF Wpforo Forum Gvectors | 5.4 | Feb 28 | wpForo Forum 2.4.14 Missing Authorization via Topic Management Form Handlers |
| CVE-2026-28555 | WF Wpforo Forum Gvectors | 4.3 | Feb 28 | wpForo Forum 2.4.14 Missing Authorization via Topic Close AJAX Handler |
| CVE-2026-28554 | WF Wpforo Forum Gvectors | 4.3 | Feb 28 | wpForo Forum 2.4.14 Missing Authorization via Post Approval AJAX Handler |
| CVE-2025-4224 | WW wpForo + wpForo Advanced Attachments gVectors | 7.2 | Jun 3 | wpForo + wpForo Advanced Attachments <= 3.1.3 - Unauthenticated Stored Cross-Site Scripting |
| CVE-2025-0764 | WF Wpforo Forum Gvectors | 6.5 | Feb 28 | wpForo Forum <= 2.4.1 - Authenticated (Subscriber+) Arbitrary File Read in update |
| CVE-2023-46309 | WP Wpdiscuz Gvectors | 7.3 | Jan 2 | WordPress wpDiscuz plugin <= 7.6.10 - Broken Access Control vulnerability |
| CVE-2023-45760 | WP Wpdiscuz Gvectors | 8.8 | Jan 2 | WordPress wpDiscuz plugin <= 7.6.3 - Broken Access Control vulnerability |
| CVE-2023-47869 | WF Wpforo Forum Gvectors | 5.4 | Dec 9 | WordPress wpForo plugin <= 2.2.5 - Broken Access Control + CSRF vulnerability |
| CVE-2024-9488 | WP Wpdiscuz Gvectors | 9.8 | Oct 25 | Comments – wpDiscuz <= 7.6.24 - Authentication Bypass via WordPress.com OAuth provider |
| CVE-2024-43289 | WF Wpforo Forum Gvectors | 7.5 | Aug 26 | WordPress wpForo Forum plugin <= 2.3.4 - Unauthenticated Sensitive Data Exposure vulnerability |
| CVE-2024-43288 | WF Wpforo Forum Gvectors | 8.1 | Aug 18 | WordPress wpForo Forum plugin <= 2.3.4 - Insecure Direct Object References (IDOR) vulnerability |
| CVE-2024-6704 | WP Wpdiscuz Gvectors | 6.1 | Aug 2 | Comments – wpDiscuz <= 7.6.21 - Unauthenticated HTML Injection |
| CVE-2022-38055 | WF Wpforo Forum Gvectors | 5.4 | Jun 21 | WordPress wpForo Forum plugin <= 2.0.9 - Auth. HTML Injection vulnerability |
| CVE-2024-35681 | WP Wpdiscuz Gvectors | 5.4 | Jun 8 | WordPress wpDiscuz plugin <= 7.6.18 - Cross Site Scripting (XSS) vulnerability |
| CVE-2023-46310 | WP Wpdiscuz Gvectors | 6.1 | Jun 4 | WordPress wpDiscuz plugin <= 7.6.10 - Content Injection vulnerability |
| CVE-2024-3200 | WF Wpforo Forum Gvectors | 6.5 | Jun 1 | wpForo Forum <= 2.3.3 - Authenticated (Contributor+) SQL Injection |
| CVE-2023-47868 | WF Wpforo Forum Gvectors | 9.8 | May 17 | WordPress wpForo plugin <= 2.2.3 - Privilege Escalation vulnerability |
| CVE-2024-2477 | WP Wpdiscuz Gvectors | 5.4 | Apr 23 | wpDiscuz <= 7.6.15 - Authenticated (Author+) Stored Cross-Site Scripting via Uploaded Image Alternative Text |
| CVE-2023-51691 | WP Wpdiscuz Gvectors | 4.8 | Feb 1 | WordPress wpDiscuz Plugin <= 7.6.12 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-46311 | WP Wpdiscuz Gvectors | 6.5 | Dec 20 | WordPress wpDiscuz Plugin <= 7.6.3 is vulnerable to Insecure Direct Object References (IDOR) |
| CVE-2023-49759 | WW Woodiscuz - Woocommerce Comments Gvectors | 8.8 | Dec 18 | WordPress WooDiscuz – WooCommerce Comments Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-47870 | WF Wpforo Forum Gvectors | 8.8 | Nov 30 | WordPress wpForo Forum Plugin <= 2.2.6 is vulnerable to Broken Access Control and Cross Site Request Forgery (CSRF) |
| CVE-2023-47872 | WF Wpforo Forum Gvectors | 5.4 | Nov 30 | WordPress wpForo Forum Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-47775 | WP Wpdiscuz Gvectors | 8.8 | Nov 22 | WordPress wpDiscuz Plugin <= 7.6.11 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-47185 | WP Wpdiscuz Gvectors | 6.1 | Nov 6 | WordPress wpDiscuz Plugin <= 7.6.11 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-3869 | WP Wpdiscuz Gvectors | 5.3 | Oct 20 | wpDiscuz <= 7.6.3 - Insecure Direct Object Reference to Comment Rating Increase/Decrease |
| CVE-2023-3998 | WP Wpdiscuz Gvectors | 5.3 | Oct 20 | wpDiscuz <= 7.6.3 - Insecure Direct Object Reference to Post Rating Increase/Decrease |
| CVE-2023-2309 | WF Wpforo Forum Gvectors | 6.1 | Jul 24 | wpForo Forum < 2.1.9 - Reflected Cross-Site Scripting |
| CVE-2023-33213 | DC Display Custom Fields – wpView gVectors | 4.8 | Jun 19 | WordPress wpView Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-2249 | WF Wpforo Forum Gvectors | 8.8 | Jun 9 | wpForo Forum <= 2.1.7 - Authenticated (Subscriber+) Local File Include, Server-Side Request Forgery, and PHAR Deserialization via file_get_contents |
| CVE-2023-33216 | WW Woodiscuz - Woocommerce Comments Gvectors | 4.8 | May 28 | WordPress WooDiscuz – WooCommerce Comments Plugin <= 2.2.9 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2022-43492 | WP Wpdiscuz Gvectors | 8.8 | Nov 18 | WordPress Comments – wpDiscuz plugin 7.4.2 - Auth. Insecure Direct Object References (IDOR) vulnerability |
| CVE-2022-40192 | WF Wpforo Forum Gvectors | 8.8 | Nov 17 | WordPress wpForo Forum plugin <= 2.0.9 - Cross-Site Request Forgery (CSRF) vulnerability |
| CVE-2022-40200 | WF Wpforo Forum Gvectors | 8.8 | Nov 17 | WordPress wpForo Forum plugin <= 2.0.9 - Auth. Arbitrary File Upload vulnerability |
| CVE-2022-40206 | WF Wpforo Forum Gvectors | 4.3 | Nov 8 | WordPress wpForo Forum plugin <= 2.0.5 - Insecure direct object references (IDOR) vulnerability |
| CVE-2022-40205 | WF Wpforo Forum Gvectors | 4.3 | Nov 8 | WordPress wpForo Forum plugin <= 2.0.5 - Insecure direct object references (IDOR) vulnerability |
| CVE-2022-40632 | WF Wpforo Forum Gvectors | 5.4 | Nov 8 | WordPress wpForo Forum plugin <= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerability |
| CVE-2022-38144 | WF Wpforo Forum Gvectors | 8.8 | Sep 9 | WordPress wpForo Forum plugin <= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerability |
| CVE-2022-23984 | WP Wpdiscuz Gvectors | 7.5 | Feb 21 | WordPress wpDiscuz plugin <= 7.3.11 - Sensitive Information Disclosure |
| CVE-2021-24806 | WP Wpdiscuz Gvectors | 4.3 | Nov 8 | wpDiscuz < 7.3.4 - Arbitrary Comment Addition/Edition/Deletion via CSRF |