Gvectors Team vulnerabilities
32 CVEs and advisories name Gvectors Team as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-28562wpForo Forum 2.4.14 SQL Injection via Topics ORDER BY Parameter
- CVE-2026-28561wpForo Forum 2.4.14 Stored XSS via Unescaped Forum Description in Templates
- CVE-2026-28560wpForo Forum 2.4.14 Stored XSS via Unsafe JSON Encoding in Inline Script
- CVE-2026-28559wpForo Forum 2.4.14 Information Disclosure via Global RSS Feed
- CVE-2026-28558wpForo Forum 2.4.14 Stored XSS via SVG Avatar File Upload
- CVE-2026-28557wpForo Forum < 2.4.16 Privilege Escalation via Role Synchronization Handler
- CVE-2026-28556wpForo Forum 2.4.14 Missing Authorization via Topic Management Form Handlers
- CVE-2026-28555wpForo Forum 2.4.14 Missing Authorization via Topic Close AJAX Handler
- CVE-2026-28554wpForo Forum 2.4.14 Missing Authorization via Post Approval AJAX Handler
- CVE-2023-47869WordPress wpForo plugin <= 2.2.5 - Broken Access Control + CSRF vulnerability
- CVE-2024-43289WordPress wpForo Forum plugin <= 2.3.4 - Unauthenticated Sensitive Data Exposure vulnerability
- CVE-2024-43288WordPress wpForo Forum plugin <= 2.3.4 - Insecure Direct Object References (IDOR) vulnerability
- CVE-2022-38055WordPress wpForo Forum plugin <= 2.0.9 - Auth. HTML Injection vulnerability
- CVE-2024-35681WordPress wpDiscuz plugin <= 7.6.18 - Cross Site Scripting (XSS) vulnerability
- CVE-2023-46310WordPress wpDiscuz plugin <= 7.6.10 - Content Injection vulnerability
- CVE-2023-51691WordPress wpDiscuz Plugin <= 7.6.12 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46311WordPress wpDiscuz Plugin <= 7.6.3 is vulnerable to Insecure Direct Object References (IDOR)
- CVE-2023-49759WordPress WooDiscuz – WooCommerce Comments Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-47870WordPress wpForo Forum Plugin <= 2.2.6 is vulnerable to Broken Access Control and Cross Site Request Forgery (CSRF)
- CVE-2023-47872WordPress wpForo Forum Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47775WordPress wpDiscuz Plugin <= 7.6.11 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-47185WordPress wpDiscuz Plugin <= 7.6.11 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-33216WordPress WooDiscuz – WooCommerce Comments Plugin <= 2.2.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-43492WordPress Comments – wpDiscuz plugin 7.4.2 - Auth. Insecure Direct Object References (IDOR) vulnerability
- CVE-2022-40192WordPress wpForo Forum plugin <= 2.0.9 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-40200WordPress wpForo Forum plugin <= 2.0.9 - Auth. Arbitrary File Upload vulnerability
- CVE-2022-40206WordPress wpForo Forum plugin <= 2.0.5 - Insecure direct object references (IDOR) vulnerability
- CVE-2022-40205WordPress wpForo Forum plugin <= 2.0.5 - Insecure direct object references (IDOR) vulnerability
- CVE-2022-40632WordPress wpForo Forum plugin <= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-38144WordPress wpForo Forum plugin <= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerability