givanz vulnerabilities

CVEs per yearBy the year they were published

1. 202516
2. 202641

Newest CVEs

• CVE-2026-112905

  Vvveb: Authenticated IDOR on admin/auth-token Allows Admin Privilege Escalation via API Token Theft

  givanz · Vvveb

  Critical9.0
• CVE-2026-110799

  Vvveb: Authentication Bypass via PHP Array Injection leading to full Account Takeover

  givanz · Vvveb

  Critical9.8
• CVE-2026-112904

  Vvveb: Path Traversal in nextRestore() and nextBackup()

  givanz · Vvveb

  High8.7
• CVE-2026-55232

  Vvveb: Server-side request forgery in Vvveb via IPv6 bypass of validateUrl() in editor oEmbed proxy

  givanz · Vvveb

  High7.6
• CVE-2026-55230

  Vvveb: Stored XSS in Vvveb via sanitizeHTML() filter bypass using a quoted greater-than character

  givanz · Vvveb

  High8.7
• CVE-2026-55231

  Vvveb: Path traversal in Vvveb via sanitizeFileName() bypass enables arbitrary file read and delete through backup tools

  givanz · Vvveb

  High7.2
• CVE-2026-54506

  Vvveb: Stored XSS via sanitizeHTML() bypass in user profile bio field

  givanz · Vvveb

  High7.6
• CVE-2026-54612

  Vvveb: Authenticated editor path traversal to PHP file write/RCE via data-v-save-global

  givanz · Vvveb

  High8.8
• CVE-2026-54613

  Vvveb: Path Traversal in Revision Backup Reader/Deleter via Unsanitized theme Parameter

  givanz · Vvveb

  Medium5.4
• CVE-2026-54507

  Vvveb oEmbedProxy vulnerable to server-side request forgery

  givanz · Vvveb

  High8.4