Gvectors vulnerabilities

Products

• Wpdiscuz 36
• Wpforo Forum 29
• Wpforo 5
• Woodiscuz - Woocommerce Comments 2

Newest

• advancedcoding wpdiscuz WordPress wpDiscuz plugin <= 7.6.73 - Cross Site Scripting (XSS) vulnerability CVE-2026-119366 7.1 HighNovember 4, 2026
• gvectors wpdiscuz wpDiscuz before 7.6.47 - No Rate Limiting on Subscription Endpoints with LIKE Wildcard Bypass CVE-2026-22216 6.9 MediumMarch 13, 2026
• gvectors wpdiscuz wpDiscuz before 7.6.47 - Missing CSRF Protection on wpdGetFollowsPage CVE-2026-22215 5.3 MediumMarch 13, 2026
• gvectors wpdiscuz wpDiscuz before 7.6.47 - Cross-Site Scripting via Unescaped Attachment URLs CVE-2026-22210 2.1 LowMarch 13, 2026
• gvectors wpdiscuz wpDiscuz before 7.6.47 - Cross-Site Scripting via Unescaped Custom CSS in Style Tag CVE-2026-22209 5.1 MediumMarch 13, 2026
• gvectors wpdiscuz wpDiscuz before 7.6.47 - Unsanitized Cookie Email Used as wp_mail() Recipient CVE-2026-22204 6.3 MediumMarch 13, 2026
• gvectors wpdiscuz wpDiscuz before 7.6.47 - Options Export Leaks OAuth Secrets in Plaintext CVE-2026-22203 6.9 MediumMarch 13, 2026
• gvectors wpdiscuz wpDiscuz before 7.6.47 - Destructive GET Action Deletes All Comments by Email CVE-2026-22202 6.1 MediumMarch 13, 2026
• gvectors wpdiscuz wpDiscuz before 7.6.47 - IP Address Spoofing in getIP() CVE-2026-22201 6.9 MediumMarch 13, 2026
• voltronic power snmp web pro, gvectors wpdiscuz +1 more Voltronic Power SNMP Web Pro 1.1 Path Traversal via upload.cgi CVE-2026-22199 8.7 HighMarch 13, 2026
• gvectors wpdiscuz wpDiscuz before 7.6.47 - SQL Injection in getAllSubscriptions() CVE-2026-22193 9.2 CriticalMarch 13, 2026
• voltronic power snmp web pro, gvectors wpdiscuz +1 more Voltronic Power SNMP Web Pro 1.1 Authentication Bypass via localStorage CVE-2026-22192 8.8 HighMarch 13, 2026
• beghelli sicuroweb (sicuro24), gvectors wpdiscuz +1 more Beghelli Sicuro24 SicuroWeb AngularJS Template Injection CVE-2026-22191 5.1 MediumMarch 13, 2026
• gvectors wpdiscuz wpDiscuz before 7.6.47 - Stored Cross-Site Scripting in Inline Comment Preview CVE-2026-22183 5.3 MediumMarch 13, 2026
• gvectors wpdiscuz wpDiscuz before 7.6.47 - Unauthenticated Email Notification Flood via wpdCheckNotificationType CVE-2026-22182 8.7 HighMarch 13, 2026
• gvectors wpforo forum wpForo Forum 2.4.14 SQL Injection via Topics ORDER BY Parameter CVE-2026-28562 8.8 HighFebruary 28, 2026
• gvectors wpforo forum wpForo Forum 2.4.14 Stored XSS via Unescaped Forum Description in Templates CVE-2026-28561 4.8 MediumFebruary 28, 2026
• gvectors wpforo forum wpForo Forum 2.4.14 Stored XSS via Unsafe JSON Encoding in Inline Script CVE-2026-28560 4.8 MediumFebruary 28, 2026
• gvectors wpforo forum wpForo Forum 2.4.14 Information Disclosure via Global RSS Feed CVE-2026-28559 6.9 MediumFebruary 28, 2026
• gvectors wpforo forum wpForo Forum 2.4.14 Stored XSS via SVG Avatar File Upload CVE-2026-28558 5.1 MediumFebruary 28, 2026
• gvectors wpforo forum wpForo Forum < 2.4.16 Privilege Escalation via Role Synchronization Handler CVE-2026-28557 7.1 HighFebruary 28, 2026
• gvectors wpforo forum wpForo Forum 2.4.14 Missing Authorization via Topic Management Form Handlers CVE-2026-28556 5.3 MediumFebruary 28, 2026
• gvectors wpforo forum wpForo Forum 2.4.14 Missing Authorization via Topic Close AJAX Handler CVE-2026-28555 5.3 MediumFebruary 28, 2026
• gvectors wpforo forum wpForo Forum 2.4.14 Missing Authorization via Post Approval AJAX Handler CVE-2026-28554 5.3 MediumFebruary 28, 2026
• advancedcoding wpdiscuz WordPress wpDiscuz plugin <= 7.6.43 - Insecure Direct Object References (IDOR) vulnerability CVE-2025-68997 5.3 MediumDecember 30, 2025
• advancedcoding wpdiscuz WordPress wpDiscuz Plugin <= 7.6.33 - Broken Access Control Vulnerability CVE-2025-59591 4.3 MediumSeptember 22, 2025
• gvectors wpforo + wpforo advanced attachments wpForo + wpForo Advanced Attachments <= 3.1.3 - Unauthenticated Stored Cross-Site Scripting CVE-2025-4224 7.2 HighJune 3, 2025
• gvectors wpforo forum wpForo Forum <= 2.4.1 - Authenticated (Subscriber+) Arbitrary File Read in update CVE-2025-0764 6.5 MediumFebruary 28, 2025
• advancedcoding wpdiscuz WordPress wpDiscuz plugin <= 7.6.10 - Broken Access Control vulnerability CVE-2023-46309 5.3 MediumJanuary 2, 2025
• advancedcoding wpdiscuz WordPress wpDiscuz plugin <= 7.6.3 - Broken Access Control vulnerability CVE-2023-45760 4.3 MediumJanuary 2, 2025
• gvectors wpforo forum WordPress wpForo plugin <= 2.2.5 - Broken Access Control + CSRF vulnerability CVE-2023-47869 4.3 MediumDecember 9, 2024
• advancedcoding comments – wpdiscuz, gvectors wpdiscuz +1 more Comments – wpDiscuz <= 7.6.24 - Authentication Bypass via WordPress.com OAuth provider CVE-2024-9488 9.8 CriticalOctober 25, 2024
• gvectors wpforo forum WordPress wpForo Forum plugin <= 2.3.4 - Unauthenticated Sensitive Data Exposure vulnerability CVE-2024-43289 7.5 HighAugust 26, 2024
• gvectors wpforo forum WordPress wpForo Forum plugin <= 2.3.4 - Insecure Direct Object References (IDOR) vulnerability CVE-2024-43288 4.3 MediumAugust 18, 2024
• advancedcoding comments – wpdiscuz, gvectors wpdiscuz, gvectorsteam comments-wpdiscuz +2 more Comments – wpDiscuz <= 7.6.21 - Unauthenticated HTML Injection CVE-2024-6704 5.3 MediumAugust 2, 2024
• gvectors wpforo forum WordPress wpForo Forum plugin <= 2.0.9 - Auth. HTML Injection vulnerability CVE-2022-38055 4.3 MediumJune 21, 2024
• gvectors wpdiscuz WordPress wpDiscuz plugin <= 7.6.18 - Cross Site Scripting (XSS) vulnerability CVE-2024-35681 6.5 MediumJune 8, 2024
• gvectors wpdiscuz WordPress wpDiscuz plugin <= 7.6.10 - Content Injection vulnerability CVE-2023-46310 5.3 MediumJune 4, 2024
• gvectors wpforo forum wpForo Forum <= 2.3.3 - Authenticated (Contributor+) SQL Injection CVE-2024-3200 9.9 CriticalJune 1, 2024
• gvectors wpforo forum, wpforo forum +1 more WordPress wpForo plugin <= 2.2.3 - Privilege Escalation vulnerability CVE-2023-47868 7.3 HighMay 17, 2024
• gvectors wpdiscuz, advancedcoding comments – wpdiscuz +1 more wpDiscuz <= 7.6.15 - Authenticated (Author+) Stored Cross-Site Scripting via Uploaded Image Alternative Text CVE-2024-2477 6.4 MediumApril 23, 2024
• advancedcoding comments – wpdiscuz, gvectors wpdiscuz +1 more WordPress wpDiscuz Plugin <= 7.6.12 is vulnerable to Cross Site Scripting (XSS) CVE-2023-51691 5.9 MediumFebruary 1, 2024
• advancedcoding comments – wpdiscuz, gvectors wpdiscuz +1 more WordPress wpDiscuz Plugin <= 7.6.3 is vulnerable to Insecure Direct Object References (IDOR) CVE-2023-46311 2.7 LowDecember 20, 2023
• gvectors team woodiscuz – woocommerce comments, gvectors woodiscuz - woocommerce comments +1 more WordPress WooDiscuz – WooCommerce Comments Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-49759 5.4 MediumDecember 18, 2023
• gvectors wpforo forum WordPress wpForo Forum Plugin <= 2.2.6 is vulnerable to Broken Access Control and Cross Site Request Forgery (CSRF) CVE-2023-47870 7.1 HighNovember 30, 2023
• gvectors wpforo forum WordPress wpForo Forum Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS) CVE-2023-47872 6.5 MediumNovember 30, 2023
• gvectors wpdiscuz, gvectors team comments — wpdiscuz +1 more WordPress wpDiscuz Plugin <= 7.6.11 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-47775 4.3 MediumNovember 22, 2023
• gvectors wpdiscuz, gvectors team comments — wpdiscuz +1 more WordPress wpDiscuz Plugin <= 7.6.11 is vulnerable to Cross Site Scripting (XSS) CVE-2023-47185 7.1 HighNovember 6, 2023
• gvectors wpdiscuz, advancedcoding comments – wpdiscuz +1 more wpDiscuz <= 7.6.3 - Insecure Direct Object Reference to Comment Rating Increase/Decrease CVE-2023-3869 5.3 MediumOctober 20, 2023
• gvectors wpdiscuz, advancedcoding comments – wpdiscuz +1 more wpDiscuz <= 7.6.3 - Insecure Direct Object Reference to Post Rating Increase/Decrease CVE-2023-3998 5.3 MediumOctober 20, 2023
• Show olderLoading…