G
Vendor security profile
givanz
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs15
Critical0
CISA KEV0
Public exploit11
Patch rate%0
Avg. CVSS7.9
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
8
4
3
CVE KEV
CVE severity distribution
15toplam CVE
High14 (93%)
Medium1 (7%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%73
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
15Unknown
Latest vulnerabilities
7.6
CVE-2026-55232
Vvveb: Server-side request forgery in Vvveb via IPv6 bypass of validateUrl() in editor oEmbed proxy
G
Patch status unknownEPSS %0
8.7
CVE-2026-55230
Vvveb: Stored XSS in Vvveb via sanitizeHTML() filter bypass using a quoted greater-than character
G
Patch status unknownEPSS %0
7.2
CVE-2026-55231
Vvveb: Path traversal in Vvveb via sanitizeFileName() bypass enables arbitrary file read and delete through backup tools
G
Patch status unknownEPSS %1
7.6
CVE-2026-54506
Vvveb: Stored XSS via sanitizeHTML() bypass in user profile bio field
G
Patch status unknownEPSS %0
8.8
CVE-2026-54612
Vvveb: Authenticated editor path traversal to PHP file write/RCE via data-v-save-global
G
Patch status unknownEPSS %1
5.4
CVE-2026-54613
Vvveb: Path Traversal in Revision Backup Reader/Deleter via Unsanitized theme Parameter
G
Patch status unknownEPSS %0
8.4
CVE-2026-54507
Vvveb oEmbedProxy vulnerable to server-side request forgery
G
Patch status unknownEPSS %0
7.6
CVE-2026-49223
Vvveb product review authorization bypass allows Vendors to read, approve, edit, or delete reviews under other Vendors' products
G
Patch status unknownEPSS %0
8.3
CVE-2026-49224
Vvveb post revision authorization bypass allows Authors to read, restore, or delete other Authors' post revisions
G
Patch status unknownEPSS %0
7.6
CVE-2026-49222
Vvveb product question authorization bypass allows Vendors to read, approve, edit, or delete questions under other Vendors' products
G
Patch status unknownEPSS %0