Vvveb has 7 CVEs on record between 2025 and 2026. The median CVSS is 4.7 (medium), with 1 rated critical. None have a confirmed exploitation report. Most affected products: vvveb (6), Vvveb CMS (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 4.7
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Worst active — by depth score
CVE-2026-6257Critical· 9.1Vvveb CMS < v1.0.8.2 Remote Code Execution via Media Management50CVE-2025-12203Medium· 6.3A weakness has been identified in givanz Vvveb up to 1.0.7.335CVE-2025-11028Medium· 5.3A security flaw has been discovered in givanz Vvveb up to 1.0.7.229CVE-2025-11944Medium· 4.7A vulnerability was determined in givanz Vvveb up to 1.0.7.326CVE-2025-11029Medium· 4.3A weakness has been identified in givanz Vvveb up to 1.0.7.224
Vvveb vulnerabilities
CVEs affecting Vvveb, newest first. Open any entry for full detail, references, and exploit status.
7 CVEsRSS
CVE-2026-6257Critical· 9.1Vvveb CMS < v1.0.8.2 Remote Code Execution via Media Management
Vvveb CMS before 1.0.8.2 contains a remote code execution vulnerability in its media management functionality where a missing return statement in the file rename handler allows authenticated attackers to rename files to blocked extension…
CVE-2025-12203Medium· 6.3A weakness has been identified in givanz Vvveb up to 1.0.7.3
A weakness has been identified in givanz Vvveb up to 1.0.7.3. This issue affects the function sanitizeFileName of the file system/functions.php of the component Code Editor. Executing a manipulation of the argument File can lead to path …
CVE-2025-11944Medium· 4.7A vulnerability was determined in givanz Vvveb up to 1.0.7.3
A vulnerability was determined in givanz Vvveb up to 1.0.7.3. This affects the function Import of the file admin/controller/tools/import.php of the component Raw SQL Handler. This manipulation causes sql injection. The attack may be init…
CVE-2025-11029Medium· 4.3A weakness has been identified in givanz Vvveb up to 1.0.7.2
A weakness has been identified in givanz Vvveb up to 1.0.7.2. This vulnerability affects unknown code. Executing manipulation can lead to cross-site request forgery. The attack can be executed remotely. The exploit has been made availabl…
CVE-2025-11028Medium· 5.3A security flaw has been discovered in givanz Vvveb up to 1.0.7.2
A security flaw has been discovered in givanz Vvveb up to 1.0.7.2. This affects an unknown part of the component Image Handler. Performing manipulation results in information disclosure. Remote exploitation of the attack is possible. The…
CVE-2025-11027Low· 2.4A vulnerability was identified in givanz Vvveb up to 1.0.7.2
A vulnerability was identified in givanz Vvveb up to 1.0.7.2. Affected by this issue is some unknown functionality of the component SVG File Handler. Such manipulation leads to cross site scripting. The attack may be launched remotely. T…
CVE-2025-11026Low· 3.5A vulnerability was determined in givanz Vvveb up to 1.0.7.2
A vulnerability was determined in givanz Vvveb up to 1.0.7.2. Affected by this vulnerability is an unknown functionality of the component Configuration File Handler. This manipulation causes information disclosure. The attack may be init…