GT
Vendor
gVectors Team
32
CVEs
0
On KEV
0
New 30D
Products
WF9.8
wpForo Forum
gVectors Team
16 CVEs0 on KEV0 new
WF8.8
wpForo Forum (WordPress plugin)
gVectors Team
6 CVEs0 on KEV0 new
CW8.8
Comments — wpDiscuz
gVectors Team
4 CVEs0 on KEV0 new
CW8.8
Comments – wpDiscuz (WordPress plugin)
gVectors Team
2 CVEs0 on KEV0 new
WW8.8
WooDiscuz – WooCommerce Comments
gVectors Team
2 CVEs0 on KEV0 new
WP6.1
wpDiscuz
gVectors Team
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-28562 | WF wpForo Forum gVectors Team | 9.8 | Feb 28 | wpForo Forum 2.4.14 SQL Injection via Topics ORDER BY Parameter |
| CVE-2026-28561 | WF wpForo Forum gVectors Team | 4.8 | Feb 28 | wpForo Forum 2.4.14 Stored XSS via Unescaped Forum Description in Templates |
| CVE-2026-28560 | WF wpForo Forum gVectors Team | 4.8 | Feb 28 | wpForo Forum 2.4.14 Stored XSS via Unsafe JSON Encoding in Inline Script |
| CVE-2026-28559 | WF wpForo Forum gVectors Team | 5.3 | Feb 28 | wpForo Forum 2.4.14 Information Disclosure via Global RSS Feed |
| CVE-2026-28558 | WF wpForo Forum gVectors Team | 5.4 | Feb 28 | wpForo Forum 2.4.14 Stored XSS via SVG Avatar File Upload |
| CVE-2026-28557 | WF wpForo Forum gVectors Team | 6.5 | Feb 28 | wpForo Forum < 2.4.16 Privilege Escalation via Role Synchronization Handler |
| CVE-2026-28556 | WF wpForo Forum gVectors Team | 5.4 | Feb 28 | wpForo Forum 2.4.14 Missing Authorization via Topic Management Form Handlers |
| CVE-2026-28555 | WF wpForo Forum gVectors Team | 4.3 | Feb 28 | wpForo Forum 2.4.14 Missing Authorization via Topic Close AJAX Handler |
| CVE-2026-28554 | WF wpForo Forum gVectors Team | 4.3 | Feb 28 | wpForo Forum 2.4.14 Missing Authorization via Post Approval AJAX Handler |
| CVE-2023-47869 | WF wpForo Forum gVectors Team | 5.4 | Dec 9 | WordPress wpForo plugin <= 2.2.5 - Broken Access Control + CSRF vulnerability |
| CVE-2024-43289 | WF wpForo Forum gVectors Team | 7.5 | Aug 26 | WordPress wpForo Forum plugin <= 2.3.4 - Unauthenticated Sensitive Data Exposure vulnerability |
| CVE-2024-43288 | WF wpForo Forum gVectors Team | 8.1 | Aug 18 | WordPress wpForo Forum plugin <= 2.3.4 - Insecure Direct Object References (IDOR) vulnerability |
| CVE-2022-38055 | WF wpForo Forum gVectors Team | 5.4 | Jun 21 | WordPress wpForo Forum plugin <= 2.0.9 - Auth. HTML Injection vulnerability |
| CVE-2024-35681 | WP wpDiscuz gVectors Team | 5.4 | Jun 8 | WordPress wpDiscuz plugin <= 7.6.18 - Cross Site Scripting (XSS) vulnerability |
| CVE-2023-46310 | WP wpDiscuz gVectors Team | 6.1 | Jun 4 | WordPress wpDiscuz plugin <= 7.6.10 - Content Injection vulnerability |
| CVE-2023-51691 | CW Comments – wpDiscuz gVectors Team | 4.8 | Feb 1 | WordPress wpDiscuz Plugin <= 7.6.12 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-46311 | CW Comments – wpDiscuz gVectors Team | 6.5 | Dec 20 | WordPress wpDiscuz Plugin <= 7.6.3 is vulnerable to Insecure Direct Object References (IDOR) |
| CVE-2023-49759 | WW WooDiscuz – WooCommerce Comments gVectors Team | 8.8 | Dec 18 | WordPress WooDiscuz – WooCommerce Comments Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-47870 | WF wpForo Forum gVectors Team | 8.8 | Nov 30 | WordPress wpForo Forum Plugin <= 2.2.6 is vulnerable to Broken Access Control and Cross Site Request Forgery (CSRF) |
| CVE-2023-47872 | WF wpForo Forum gVectors Team | 5.4 | Nov 30 | WordPress wpForo Forum Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-47775 | CW Comments — wpDiscuz gVectors Team | 8.8 | Nov 22 | WordPress wpDiscuz Plugin <= 7.6.11 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-47185 | CW Comments — wpDiscuz gVectors Team | 6.1 | Nov 6 | WordPress wpDiscuz Plugin <= 7.6.11 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-33216 | WW WooDiscuz – WooCommerce Comments gVectors Team | 4.8 | May 28 | WordPress WooDiscuz – WooCommerce Comments Plugin <= 2.2.9 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2022-43492 | CW Comments – wpDiscuz (WordPress plugin) gVectors Team | 8.8 | Nov 18 | WordPress Comments – wpDiscuz plugin 7.4.2 - Auth. Insecure Direct Object References (IDOR) vulnerability |
| CVE-2022-40192 | WF wpForo Forum (WordPress plugin) gVectors Team | 8.8 | Nov 17 | WordPress wpForo Forum plugin <= 2.0.9 - Cross-Site Request Forgery (CSRF) vulnerability |
| CVE-2022-40200 | WF wpForo Forum (WordPress plugin) gVectors Team | 8.8 | Nov 17 | WordPress wpForo Forum plugin <= 2.0.9 - Auth. Arbitrary File Upload vulnerability |
| CVE-2022-40206 | WF wpForo Forum (WordPress plugin) gVectors Team | 4.3 | Nov 8 | WordPress wpForo Forum plugin <= 2.0.5 - Insecure direct object references (IDOR) vulnerability |
| CVE-2022-40205 | WF wpForo Forum (WordPress plugin) gVectors Team | 4.3 | Nov 8 | WordPress wpForo Forum plugin <= 2.0.5 - Insecure direct object references (IDOR) vulnerability |
| CVE-2022-40632 | WF wpForo Forum (WordPress plugin) gVectors Team | 5.4 | Nov 8 | WordPress wpForo Forum plugin <= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerability |
| CVE-2022-38144 | WF wpForo Forum (WordPress plugin) gVectors Team | 8.8 | Sep 9 | WordPress wpForo Forum plugin <= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerability |
| CVE-2022-23984 | CW Comments – wpDiscuz (WordPress plugin) gVectors Team | 7.5 | Feb 21 | WordPress wpDiscuz plugin <= 7.3.11 - Sensitive Information Disclosure |
| CVE-2021-24406 | WF wpForo Forum gVectors Team | 6.1 | Jul 6 | wpForo Forum < 1.9.7 - Open Redirect |