# cve.now: Gvectors Team

The newest entries naming Gvectors Team as an affected vendor (up to 200), of 32 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-28562](https://cve.now/CVE-2026-28562.md): wpForo Forum 2.4.14 SQL Injection via Topics ORDER BY Parameter (CVSS 8.8)
- [CVE-2026-28561](https://cve.now/CVE-2026-28561.md): wpForo Forum 2.4.14 Stored XSS via Unescaped Forum Description in Templates (CVSS 4.8)
- [CVE-2026-28560](https://cve.now/CVE-2026-28560.md): wpForo Forum 2.4.14 Stored XSS via Unsafe JSON Encoding in Inline Script (CVSS 4.8)
- [CVE-2026-28559](https://cve.now/CVE-2026-28559.md): wpForo Forum 2.4.14 Information Disclosure via Global RSS Feed (CVSS 6.9)
- [CVE-2026-28558](https://cve.now/CVE-2026-28558.md): wpForo Forum 2.4.14 Stored XSS via SVG Avatar File Upload (CVSS 5.1)
- [CVE-2026-28557](https://cve.now/CVE-2026-28557.md): wpForo Forum \< 2.4.16 Privilege Escalation via Role Synchronization Handler (CVSS 7.1)
- [CVE-2026-28556](https://cve.now/CVE-2026-28556.md): wpForo Forum 2.4.14 Missing Authorization via Topic Management Form Handlers (CVSS 5.3)
- [CVE-2026-28555](https://cve.now/CVE-2026-28555.md): wpForo Forum 2.4.14 Missing Authorization via Topic Close AJAX Handler (CVSS 5.3)
- [CVE-2026-28554](https://cve.now/CVE-2026-28554.md): wpForo Forum 2.4.14 Missing Authorization via Post Approval AJAX Handler (CVSS 5.3)
- [CVE-2023-47869](https://cve.now/CVE-2023-47869.md): WordPress wpForo plugin \<= 2.2.5 - Broken Access Control + CSRF vulnerability (CVSS 4.3)
- [CVE-2024-43289](https://cve.now/CVE-2024-43289.md): WordPress wpForo Forum plugin \<= 2.3.4 - Unauthenticated Sensitive Data Exposure vulnerability (CVSS 7.5)
- [CVE-2024-43288](https://cve.now/CVE-2024-43288.md): WordPress wpForo Forum plugin \<= 2.3.4 - Insecure Direct Object References (IDOR) vulnerability (CVSS 4.3)
- [CVE-2022-38055](https://cve.now/CVE-2022-38055.md): WordPress wpForo Forum plugin \<= 2.0.9 - Auth. HTML Injection vulnerability (CVSS 4.3)
- [CVE-2024-35681](https://cve.now/CVE-2024-35681.md): WordPress wpDiscuz plugin \<= 7.6.18 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2023-46310](https://cve.now/CVE-2023-46310.md): WordPress wpDiscuz plugin \<= 7.6.10 - Content Injection vulnerability (CVSS 5.3)
- [CVE-2023-51691](https://cve.now/CVE-2023-51691.md): WordPress wpDiscuz Plugin \<= 7.6.12 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9)
- [CVE-2023-46311](https://cve.now/CVE-2023-46311.md): WordPress wpDiscuz Plugin \<= 7.6.3 is vulnerable to Insecure Direct Object References (IDOR) (CVSS 2.7)
- [CVE-2023-49759](https://cve.now/CVE-2023-49759.md): WordPress WooDiscuz – WooCommerce Comments Plugin \<= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4)
- [CVE-2023-47870](https://cve.now/CVE-2023-47870.md): WordPress wpForo Forum Plugin \<= 2.2.6 is vulnerable to Broken Access Control and Cross Site Request Forgery (CSRF) (CVSS 7.1)
- [CVE-2023-47872](https://cve.now/CVE-2023-47872.md): WordPress wpForo Forum Plugin \<= 2.2.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5)
- [CVE-2023-47775](https://cve.now/CVE-2023-47775.md): WordPress wpDiscuz Plugin \<= 7.6.11 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3)
- [CVE-2023-47185](https://cve.now/CVE-2023-47185.md): WordPress wpDiscuz Plugin \<= 7.6.11 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1)
- [CVE-2023-33216](https://cve.now/CVE-2023-33216.md): WordPress WooDiscuz – WooCommerce Comments Plugin \<= 2.2.9 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9)
- [CVE-2022-43492](https://cve.now/CVE-2022-43492.md): WordPress Comments – wpDiscuz plugin 7.4.2 - Auth. Insecure Direct Object References (IDOR) vulnerability (CVSS 4.3)
- [CVE-2022-40192](https://cve.now/CVE-2022-40192.md): WordPress wpForo Forum plugin \<= 2.0.9 - Cross-Site Request Forgery (CSRF) vulnerability (CVSS 7.1)
- [CVE-2022-40200](https://cve.now/CVE-2022-40200.md): WordPress wpForo Forum plugin \<= 2.0.9 - Auth. Arbitrary File Upload vulnerability (CVSS 9.9)
- [CVE-2022-40206](https://cve.now/CVE-2022-40206.md): WordPress wpForo Forum plugin \<= 2.0.5 - Insecure direct object references (IDOR) vulnerability (CVSS 6.3)
- [CVE-2022-40205](https://cve.now/CVE-2022-40205.md): WordPress wpForo Forum plugin \<= 2.0.5 - Insecure direct object references (IDOR) vulnerability (CVSS 5.4)
- [CVE-2022-40632](https://cve.now/CVE-2022-40632.md): WordPress wpForo Forum plugin \<= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerability (CVSS 5.4)
- [CVE-2022-38144](https://cve.now/CVE-2022-38144.md): WordPress wpForo Forum plugin \<= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerability (CVSS 8.8)
- [CVE-2022-23984](https://cve.now/CVE-2022-23984.md): WordPress wpDiscuz plugin \<= 7.3.11 - Sensitive Information Disclosure (CVSS 3.7)
- [CVE-2021-24406](https://cve.now/CVE-2021-24406.md): wpForo Forum \< 1.9.7 - Open Redirect (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/gvectors-team
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.