Known Vulnerabilities for Vvveb by Givanz
Listed below are 10 of the newest known vulnerabilities associated with "Vvveb" by "Givanz".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-126380 json | Vvveb before 1.0.9.0 contains a denylist bypass in system/traits/media.php where '.phar' is misconfigured with a leading dot,... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-126379 json | Vvveb 1.0.8.6 contains an incomplete server-side request forgery fix that allows authenticated admin users to bypass DNS pinn... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-126378 json | Vvveb through 1.0.8.6 contains a file upload vulnerability in the theme installer validFile() function that uses strpos() ins... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-126377 json | Vvveb before 1.0.9.0 contains an authentication bypass vulnerability in generateCookie() in system/user/user.php that uses lo... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-126376 json | Vvveb 1.0.8.4 through 1.0.8.6 contains an incomplete authorization fix that allows low-privilege authors and vendors to acces... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-126375 json | Vvveb through 1.0.8.6 contains a missing authorization vulnerability that allows low-privilege vendors to rename, delete, or ... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-126374 json | Vvveb through 1.0.8.6 contains an SQL injection vulnerability because the @KEYS(:each) macro emits PHP array keys as backtick... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-126373 json | Vvveb 1.0.8.4 through 1.0.8.6 contains an authorization bypass vulnerability in the content/revisions revision action that le... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-126372 json | Vvveb through 1.0.8.6 contains an incomplete fix for CVE-2026-41934 that allows authenticated editor or site_admin users to w... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-126371 json | Vvveb through 1.0.8.6 contains an SQL injection vulnerability in Admin_Auth_TokenSQL::update(), which interpolates admin_auth... | Not Provided | 2026-11-13 | 2026-11-13 |