gvectors Vulnerability Advisory Catalog

Total 70 security vulnerabilities recorded for gvectors software and firmware.

← Back to All Vendors
Component: wpdiscuz

Missing Authorization vulnerability in AdvancedCoding wpDiscuz wpdiscuz allows Exploiting Incorrectly Configured Access Control Security Levels.This i...

📅 2025-01-02
CVSS 5.3 Dossier →
Component: wpdiscuz

Missing Authorization vulnerability in AdvancedCoding wpDiscuz wpdiscuz allows Exploiting Incorrectly Configured Access Control Security Levels.This i...

📅 2025-01-02
CVSS 4.3 Dossier →
Component: wpforo_forum

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in gVectors Team wpForo Forum allows Code Injection.This i...

📅 2024-12-09
CVSS 4.3 Dossier →
CVE-2024-9488 CRITICAL
Component: wpdiscuz

The Comments – wpDiscuz plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 7.6.24. This is due to insuf...

📅 2024-10-25
CVSS 9.8 Dossier →
Component: wpforo_forum

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in gVectors Team wpForo Forum.This issue affects wpForo Forum: from n/a throu...

📅 2024-08-26
CVSS 7.5 Dossier →
Component: wpforo_forum

Authorization Bypass Through User-Controlled Key vulnerability in gVectors Team wpForo Forum.This issue affects wpForo Forum: from n/a through 2.3.4....

📅 2024-08-18
CVSS 4.3 Dossier →
CVE-2024-6704 MEDIUM
Component: wpdiscuz

The Comments – wpDiscuz plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 7.6.21. This is due to a lack of fi...

📅 2024-08-02
CVSS 5.3 Dossier →
Component: wpforo_forum

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in gVectors Team wpForo Forum allows Content Spoofing.This...

📅 2024-06-21
CVSS 4.3 Dossier →
Component: wpdiscuz

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in gVectors Team wpDiscuz allows Stored XSS....

📅 2024-06-08
CVSS 6.5 Dossier →
Component: wpdiscuz

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in gVectors Team wpDiscuz allows Code Injection.This issue...

📅 2024-06-04
CVSS 5.3 Dossier →
CVE-2024-3200 CRITICAL
Component: wpforo_forum

The wpForo Forum plugin for WordPress is vulnerable to SQL Injection via the 'slug' attribute of the 'wpforo' shortcode in all versions up to, and inc...

📅 2024-06-01
CVSS 9.9 Dossier →
Component: wpforo_forum

Improper Privilege Management vulnerability in wpForo wpForo Forum allows Privilege Escalation.This issue affects wpForo Forum: from n/a through 2.2.3...

📅 2024-05-17
CVSS 7.3 Dossier →
CVE-2024-2477 MEDIUM
Component: wpdiscuz

The wpDiscuz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Alternative Text' field of an uploaded image in all versions u...

📅 2024-04-23
CVSS 6.4 Dossier →
Component: wpdiscuz

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gVectors Team Comments – wpDiscuz allows Stored ...

📅 2024-02-01
CVSS 5.9 Dossier →
Component: wpdiscuz

Authorization Bypass Through User-Controlled Key vulnerability in gVectors Team Comments – wpDiscuz.This issue affects Comments – wpDiscuz: from n/a t...

📅 2023-12-20
CVSS 2.7 Dossier →
Component: woodiscuz_-_woocommerce_comments

Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team WooDiscuz – WooCommerce Comments.This issue affects WooDiscuz – WooCommerce Comments:...

📅 2023-12-18
CVSS 5.4 Dossier →
Component: wpforo_forum

Cross-Site Request Forgery (CSRF), Missing Authorization vulnerability in gVectors Team wpForo Forum wpforo allows Cross Site Request Forgery, Accessi...

📅 2023-11-30
CVSS 5.7 Dossier →
Component: wpforo_forum

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gVectors Team wpForo Forum allows Stored XSS.Thi...

📅 2023-11-30
CVSS 6.5 Dossier →
Component: wpdiscuz

Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team Comments — wpDiscuz plugin <= 7.6.11 versions....

📅 2023-11-22
CVSS 4.3 Dossier →
Component: wpdiscuz

Unauth. Stored Cross-Site Scripting (XSS) vulnerability in gVectors Team Comments — wpDiscuz plugin <= 7.6.11 versions....

📅 2023-11-06
CVSS 7.1 Dossier →
CVE-2023-3998 MEDIUM
Component: wpdiscuz

The wpDiscuz plugin for WordPress is vulnerable to unauthorized modification of data due to a missing authorization check on the userRate function in ...

📅 2023-10-20
CVSS 5.3 Dossier →
CVE-2023-3869 MEDIUM
Component: wpdiscuz

The wpDiscuz plugin for WordPress is vulnerable to unauthorized modification of data due to a missing authorization check on the voteOnComment functio...

📅 2023-10-20
CVSS 5.3 Dossier →
CVE-2023-2309 MEDIUM
Component: wpforo_forum

The wpForo Forum WordPress plugin before 2.1.9 does not escape some request parameters while in debug mode, leading to a Reflected Cross-Site Scriptin...

📅 2023-07-24
CVSS 6.1 Dossier →
Component: wpview

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in gVectors Display Custom Fields – wpView plugin <= 1.3.0 versions....

📅 2023-06-19
CVSS 5.9 Dossier →
Page 2 of 3 (70 Total Records)