agentprime: givanz-vvvebEvery new CVE for givanz-vvveb.https://agentprime.io/CVE-2026-112905: Vvveb: Authenticated IDOR on admin/auth-token Allows Admin Privilege Escalation via API Token Thefthttps://agentprime.io/advisories/CVE-2026-112905/https://agentprime.io/advisories/CVE-2026-112905/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 14:19:46 GMTCVEcriticalCVE-2026-110799: Vvveb: Authentication Bypass via PHP Array Injection leading to full Account Takeoverhttps://agentprime.io/advisories/CVE-2026-110799/https://agentprime.io/advisories/CVE-2026-110799/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 14:19:17 GMTCVEcriticalCVE-2026-112904: Vvveb: Path Traversal in nextRestore() and nextBackup()https://agentprime.io/advisories/CVE-2026-112904/https://agentprime.io/advisories/CVE-2026-112904/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 11:45:55 GMTCVECVE-2026-55232: Vvveb: Server-side request forgery in Vvveb via IPv6 bypass of validateUrl() in editor oEmbed proxyhttps://agentprime.io/advisories/CVE-2026-55232/https://agentprime.io/advisories/CVE-2026-55232/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 18:43:19 GMTCVECVE-2026-55230: Vvveb: Stored XSS in Vvveb via sanitizeHTML() filter bypass using a quoted greater-than characterhttps://agentprime.io/advisories/CVE-2026-55230/https://agentprime.io/advisories/CVE-2026-55230/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 18:42:50 GMTCVECVE-2026-55231: Vvveb: Path traversal in Vvveb via sanitizeFileName() bypass enables arbitrary file read and delete through backup toolshttps://agentprime.io/advisories/CVE-2026-55231/https://agentprime.io/advisories/CVE-2026-55231/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 18:42:39 GMTCVECVE-2026-54506: Vvveb: Stored XSS via sanitizeHTML() bypass in user profile bio fieldhttps://agentprime.io/advisories/CVE-2026-54506/https://agentprime.io/advisories/CVE-2026-54506/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 21:47:20 GMTCVECVE-2026-54612: Vvveb: Authenticated editor path traversal to PHP file write/RCE via data-v-save-globalhttps://agentprime.io/advisories/CVE-2026-54612/https://agentprime.io/advisories/CVE-2026-54612/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 21:46:27 GMTCVECVE-2026-54613: Vvveb: Path Traversal in Revision Backup Reader/Deleter via Unsanitized theme Parameterhttps://agentprime.io/advisories/CVE-2026-54613/https://agentprime.io/advisories/CVE-2026-54613/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 21:45:32 GMTCVECVE-2026-54507: Vvveb oEmbedProxy vulnerable to server-side request forgeryhttps://agentprime.io/advisories/CVE-2026-54507/https://agentprime.io/advisories/CVE-2026-54507/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 21:44:47 GMTCVECVE-2026-49223: Vvveb product review authorization bypass allows Vendors to read, approve, edit, or delete reviews under other Vendors' productshttps://agentprime.io/advisories/CVE-2026-49223/https://agentprime.io/advisories/CVE-2026-49223/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 16:18:09 GMTCVECVE-2026-49224: Vvveb post revision authorization bypass allows Authors to read, restore, or delete other Authors' post revisionshttps://agentprime.io/advisories/CVE-2026-49224/https://agentprime.io/advisories/CVE-2026-49224/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 16:17:30 GMTCVECVE-2026-49222: Vvveb product question authorization bypass allows Vendors to read, approve, edit, or delete questions under other Vendors' productshttps://agentprime.io/advisories/CVE-2026-49222/https://agentprime.io/advisories/CVE-2026-49222/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 16:17:00 GMTCVECVE-2026-49225: Vvveb product revision authorization bypass allows Vendors to read, restore, or delete other Vendors' product revisionshttps://agentprime.io/advisories/CVE-2026-49225/https://agentprime.io/advisories/CVE-2026-49225/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 16:16:24 GMTCVECVE-2026-49228: Vvveb product authorization bypass allows Vendors to read, duplicate, or delete other Vendors' productshttps://agentprime.io/advisories/CVE-2026-49228/https://agentprime.io/advisories/CVE-2026-49228/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 16:15:45 GMTCVECVE-2026-49226: Vvveb post authorization bypass allows Authors to view, duplicate, or delete other Authors' postshttps://agentprime.io/advisories/CVE-2026-49226/https://agentprime.io/advisories/CVE-2026-49226/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 16:01:30 GMTCVECVE-2026-49227: Vvveb comment authorization bypass allows Authors to read, approve, edit, or delete comments under other Authors' postshttps://agentprime.io/advisories/CVE-2026-49227/https://agentprime.io/advisories/CVE-2026-49227/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 16:00:49 GMTCVECVE-2026-49221: Vvveb digital asset authorization bypass allows Vendors to list, read, edit, or delete other Vendors' digital assetshttps://agentprime.io/advisories/CVE-2026-49221/https://agentprime.io/advisories/CVE-2026-49221/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 15:57:45 GMTCVECVE-2026-46408: Vvveb: checkout IDOR allows unauthorized reuse of another user's carthttps://agentprime.io/advisories/CVE-2026-46408/https://agentprime.io/advisories/CVE-2026-46408/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 15 May 2026 18:46:31 GMTCVECVE-2026-46407: Vvveb: admin/auth-token IDOR allows unauthorized disclosure of administrator REST API tokenshttps://agentprime.io/advisories/CVE-2026-46407/https://agentprime.io/advisories/CVE-2026-46407/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 15 May 2026 18:45:43 GMTCVECVE-2026-45800: Vvveb: Authenticated SQL injection in /user/orders via order_by and directionhttps://agentprime.io/advisories/CVE-2026-45800/https://agentprime.io/advisories/CVE-2026-45800/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 15 May 2026 18:44:38 GMTCVECVE-2026-45622: Vvveb: Unauthenticated reflected XSS in public product return form via customer_order_idhttps://agentprime.io/advisories/CVE-2026-45622/https://agentprime.io/advisories/CVE-2026-45622/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 15 May 2026 18:42:46 GMTCVECVE-2026-45616: Vvveb: Stored XSS in Posts allows privilege escalation via post editorhttps://agentprime.io/advisories/CVE-2026-45616/https://agentprime.io/advisories/CVE-2026-45616/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 15 May 2026 18:39:11 GMTCVECVE-2026-44826: Vvveb: Vvveb CMS — Negative-quantity cart manipulation allows creation of orders with negative grand totalshttps://agentprime.io/advisories/CVE-2026-44826/https://agentprime.io/advisories/CVE-2026-44826/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 15 May 2026 18:37:19 GMTCVECVE-2026-44366: Vvveb: Stored XSS via Comment Author Fieldhttps://agentprime.io/advisories/CVE-2026-44366/https://agentprime.io/advisories/CVE-2026-44366/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 15 May 2026 18:33:17 GMTCVECVE-2026-41937: Vvveb < 1.0.8.3 Unrestricted File Upload RCE via Plugin Uploadhttps://agentprime.io/advisories/CVE-2026-41937/https://agentprime.io/advisories/CVE-2026-41937/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 14:30:52 GMTCVECVE-2026-41935: Vvveb < 1.0.8.3 Uncontrolled Recursion Denial of Servicehttps://agentprime.io/advisories/CVE-2026-41935/https://agentprime.io/advisories/CVE-2026-41935/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 14:27:06 GMTCVECVE-2026-41933: Vvveb < 1.0.8.3 Directory Listing Information Disclosurehttps://agentprime.io/advisories/CVE-2026-41933/https://agentprime.io/advisories/CVE-2026-41933/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 14:23:59 GMTCVECVE-2026-41932: Vvveb < 1.0.8.3 Stored XSS via Signup Controllerhttps://agentprime.io/advisories/CVE-2026-41932/https://agentprime.io/advisories/CVE-2026-41932/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 14:19:34 GMTCVECVE-2026-41928: Vvveb < 1.0.8.2 Information Disclosure via Cron Controllerhttps://agentprime.io/advisories/CVE-2026-41928/https://agentprime.io/advisories/CVE-2026-41928/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 May 2026 21:13:13 GMTCVECVE-2026-41929: Vvveb < 1.0.8.2 Unauthenticated Reflected XSS via Visual Editorhttps://agentprime.io/advisories/CVE-2026-41929/https://agentprime.io/advisories/CVE-2026-41929/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 May 2026 21:08:50 GMTCVECVE-2026-41938: Vvveb < 1.0.8.2 RCE via Media Upload Handlerhttps://agentprime.io/advisories/CVE-2026-41938/https://agentprime.io/advisories/CVE-2026-41938/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 06 May 2026 18:42:35 GMTCVECVE-2026-41930: Vvveb < 1.0.8.2 Hard-coded Credentials Information Disclosure via phpMyAdminhttps://agentprime.io/advisories/CVE-2026-41930/https://agentprime.io/advisories/CVE-2026-41930/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 06 May 2026 18:37:45 GMTCVEcriticalCVE-2026-41931: Vvveb < 1.0.8.2 Information Disclosure via Debug Exception Handlerhttps://agentprime.io/advisories/CVE-2026-41931/https://agentprime.io/advisories/CVE-2026-41931/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 06 May 2026 18:36:13 GMTCVECVE-2026-41934: Vvveb < 1.0.8.2 Authenticated RCE via Code Editorhttps://agentprime.io/advisories/CVE-2026-41934/https://agentprime.io/advisories/CVE-2026-41934/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 06 May 2026 18:34:54 GMTCVECVE-2026-41936: Vvveb < 1.0.8.2 XML External Entity Injection via Importhttps://agentprime.io/advisories/CVE-2026-41936/https://agentprime.io/advisories/CVE-2026-41936/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 06 May 2026 18:27:42 GMTCVECVE-2026-39918: Vvveb < 1.0.8.1 Code Injection via Installation Endpointhttps://agentprime.io/advisories/CVE-2026-39918/https://agentprime.io/advisories/CVE-2026-39918/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Apr 2026 14:46:33 GMTCVEcriticalCVE-2026-34428: Vvveb < 1.0.8.1 SSRF via oEmbedProxyhttps://agentprime.io/advisories/CVE-2026-34428/https://agentprime.io/advisories/CVE-2026-34428/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Apr 2026 13:55:36 GMTCVECVE-2026-34427: Vvveb < 1.0.8.1 Privilege Escalation via admin/user/savehttps://agentprime.io/advisories/CVE-2026-34427/https://agentprime.io/advisories/CVE-2026-34427/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Apr 2026 13:55:15 GMTCVECVE-2026-34429: Vvveb < 1.0.8.1 Stored XSS via Media Upload and Renamehttps://agentprime.io/advisories/CVE-2026-34429/https://agentprime.io/advisories/CVE-2026-34429/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Apr 2026 13:54:37 GMTCVECVE-2025-12203: givanz Vvveb Code Editor functions.php sanitizeFileName path traversalhttps://agentprime.io/advisories/CVE-2025-12203/https://agentprime.io/advisories/CVE-2025-12203/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Oct 2025 02:02:06 GMTCVECVE-2025-11944: givanz Vvveb Raw SQL import.php import sql injectionhttps://agentprime.io/advisories/CVE-2025-11944/https://agentprime.io/advisories/CVE-2025-11944/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 19 Oct 2025 20:02:06 GMTCVECVE-2025-11029: givanz Vvveb cross-site request forgeryhttps://agentprime.io/advisories/CVE-2025-11029/https://agentprime.io/advisories/CVE-2025-11029/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Sep 2025 16:32:05 GMTCVECVE-2025-11028: givanz Vvveb Image information disclosurehttps://agentprime.io/advisories/CVE-2025-11028/https://agentprime.io/advisories/CVE-2025-11028/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Sep 2025 16:02:07 GMTCVECVE-2025-11027: givanz Vvveb SVG File cross site scriptinghttps://agentprime.io/advisories/CVE-2025-11027/https://agentprime.io/advisories/CVE-2025-11027/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Sep 2025 16:02:05 GMTCVECVE-2025-11026: givanz Vvveb Configuration File information disclosurehttps://agentprime.io/advisories/CVE-2025-11026/https://agentprime.io/advisories/CVE-2025-11026/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Sep 2025 15:02:06 GMTCVECVE-2025-9728: givanz Vvveb login.tpl cross site scriptinghttps://agentprime.io/advisories/CVE-2025-9728/https://agentprime.io/advisories/CVE-2025-9728/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 31 Aug 2025 12:02:07 GMTCVECVE-2025-9397: givanz Vvveb media.php unrestricted uploadhttps://agentprime.io/advisories/CVE-2025-9397/https://agentprime.io/advisories/CVE-2025-9397/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 24 Aug 2025 23:02:06 GMTCVECVE-2025-8976: givanz Vvveb Endpoint post cross site scriptinghttps://agentprime.io/advisories/CVE-2025-8976/https://agentprime.io/advisories/CVE-2025-8976/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 Aug 2025 19:02:06 GMTCVECVE-2025-8975: givanz Vvveb edit.tpl cross site scriptinghttps://agentprime.io/advisories/CVE-2025-8975/https://agentprime.io/advisories/CVE-2025-8975/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 Aug 2025 18:32:06 GMTCVE