Product by Givanz

    Vvveb

    55 known vulnerabilities in Vvveb (Givanz), 0 of them actively exploited (CISA KEV).

    Key figures

    55

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    5

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Vvveb (Givanz)
    CriticalCVE-2026-110799

    Vvveb: Authentication Bypass via PHP Array Injection leading to full Account Takeover

    		9.8
    MediumCVE-2025-8517

    givanz Vvveb session fixiation

    also in 1 other product

    		6.3
    HighCVE-2026-54612

    Vvveb: Authenticated editor path traversal to PHP file write/RCE via data-v-save-global

    		8.8
    HighCVE-2025-8518

    givanz Vvveb Code Editor code.php save code injection

    also in 1 other product

    		4.7
    CriticalCVE-2026-112905

    Vvveb: Authenticated IDOR on admin/auth-token Allows Admin Privilege Escalation via API Token Theft

    		9.0
    HighCVE-2026-112904

    Vvveb: Path Traversal in nextRestore() and nextBackup()

    		8.7
    CriticalCVE-2026-39918

    Vvveb < 1.0.8.1 Code Injection via Installation Endpoint

    		9.8
    HighCVE-2026-49221

    Givanz Vvveb: Authorization Bypass Through User-Controlled Key

    		8.8
    HighCVE-2026-41938

    Vvveb < 1.0.8.2 RCE via Media Upload Handler

    		8.8
    HighCVE-2026-49228

    Givanz Vvveb: Authorization Bypass Through User-Controlled Key

    		8.8
    HighCVE-2026-54507

    Vvveb oEmbedProxy vulnerable to server-side request forgery

    		—
    HighCVE-2026-55231

    Givanz Vvveb: Path Traversal

    		7.2
    HighCVE-2026-49226

    Vvveb post authorization bypass allows Authors to view, duplicate, or delete other Authors' posts

    		8.3
    HighCVE-2026-49225

    Givanz Vvveb: Authorization Bypass Through User-Controlled Key

    		8.3
    HighCVE-2026-49224

    Givanz Vvveb: Authorization Bypass Through User-Controlled Key

    		8.3
    HighCVE-2026-34427

    Vvveb < 1.0.8.1 Privilege Escalation via admin/user/save

    		8.8
    HighCVE-2026-41934

    Vvveb < 1.0.8.2 Authenticated RCE via Code Editor

    		8.8
    HighCVE-2026-55230

    Vvveb: Stored XSS in Vvveb via sanitizeHTML() filter bypass using a quoted greater-than character

    		8.7
    HighCVE-2026-55232

    Vvveb: Server-side request forgery in Vvveb via IPv6 bypass of validateUrl() in editor oEmbed proxy

    		7.6
    CriticalCVE-2026-41930

    Vvveb < 1.0.8.2 Hard-coded Credentials Information Disclosure via phpMyAdmin

    		9.8
    HighCVE-2026-49223

    Givanz Vvveb: Authorization Bypass Through User-Controlled Key

    		7.6
    HighCVE-2026-49222

    Givanz Vvveb: Authorization Bypass Through User-Controlled Key

    		7.6
    HighCVE-2026-49227

    Givanz Vvveb: Authorization Bypass Through User-Controlled Key

    		7.6
    HighCVE-2026-54506

    Vvveb: Stored XSS via sanitizeHTML() bypass in user profile bio field

    		7.6
    HighCVE-2026-41937

    Vvveb < 1.0.8.3 Unrestricted File Upload RCE via Plugin Upload

    		7.2

    All vulnerabilities in search

    All products by Givanz