Vvveb
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 73 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 22, 2024 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Vvveb through 1.0.8.6 CSRF via GET Admin State-Changing Actions
Vvveb through 1.0.8.6 Stored XSS via sanitizeHTML() Blacklist Bypass
Vvveb through 1.0.8.6 Authenticated RCE via .sql Code Injection in editor/code/save
Vvveb through 1.0.8.6 SQL Injection via Admin_Auth_TokenSQL::update() Array Keys
Vvveb through 1.0.8.6 Template Upload Bypass via MediaTrait editor/code
Vvveb 1.0.8.4 through 1.0.8.6 Authorization Bypass via Post Revisions
Vvveb through 1.0.8.6 SQL Injection via @KEYS(:each) Array Keys
Vvveb through 1.0.8.6 Cross-Tenant Digital Asset Tampering via Media Trait
Vvveb 1.0.8.4 through 1.0.8.6 BOLA via Posts, Products, and Digital Assets
Vvveb before 1.0.9.0 Cookie Forgery via PHP Type Juggling in generateCookie()
Monitor Vvveb in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.