CVEs we hold for Gvectors

Records whose assigning authority named Gvectors as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-28562wpForo Forum 2.4.14 SQL Injection via Topics ORDER BY ParametergVectors Team wpForo Forum

CVE-2026-28561wpForo Forum 2.4.14 Stored XSS via Unescaped Forum Description in TemplatesgVectors Team wpForo Forum

CVE-2026-28560wpForo Forum 2.4.14 Stored XSS via Unsafe JSON Encoding in Inline ScriptgVectors Team wpForo Forum

CVE-2026-28559wpForo Forum 2.4.14 Information Disclosure via Global RSS FeedgVectors Team wpForo Forum

CVE-2026-28558wpForo Forum 2.4.14 Stored XSS via SVG Avatar File UploadgVectors Team wpForo Forum

CVE-2026-28557wpForo Forum < 2.4.16 Privilege Escalation via Role Synchronization HandlergVectors Team wpForo Forum

CVE-2026-28556wpForo Forum 2.4.14 Missing Authorization via Topic Management Form HandlersgVectors Team wpForo Forum

CVE-2026-28555wpForo Forum 2.4.14 Missing Authorization via Topic Close AJAX HandlergVectors Team wpForo Forum

CVE-2026-28554wpForo Forum 2.4.14 Missing Authorization via Post Approval AJAX HandlergVectors Team wpForo Forum

CVE-2026-22216wpDiscuz before 7.6.47 - No Rate Limiting on Subscription Endpoints with LIKE Wildcard BypassgVectors wpDiscuz

CVE-2026-22215wpDiscuz before 7.6.47 - Missing CSRF Protection on wpdGetFollowsPagegVectors wpDiscuz

CVE-2026-22210wpDiscuz before 7.6.47 - Cross-Site Scripting via Unescaped Attachment URLsgVectors wpDiscuz

CVE-2026-22209wpDiscuz before 7.6.47 - Cross-Site Scripting via Unescaped Custom CSS in Style TaggVectors wpDiscuz

CVE-2026-22204wpDiscuz before 7.6.47 - Unsanitized Cookie Email Used as wp_mail() RecipientgVectors wpDiscuz

CVE-2026-22203wpDiscuz before 7.6.47 - Options Export Leaks OAuth Secrets in PlaintextgVectors wpDiscuz

CVE-2026-22202wpDiscuz before 7.6.47 - Destructive GET Action Deletes All Comments by EmailgVectors wpDiscuz

CVE-2026-22201wpDiscuz before 7.6.47 - IP Address Spoofing in getIP()gVectors wpDiscuz

CVE-2026-22193wpDiscuz before 7.6.47 - SQL Injection in getAllSubscriptions()gVectors wpDiscuz

CVE-2026-22183wpDiscuz before 7.6.47 - Stored Cross-Site Scripting in Inline Comment PreviewgVectors wpDiscuz

CVE-2026-22182wpDiscuz before 7.6.47 - Unauthenticated Email Notification Flood via wpdCheckNotificationTypegVectors wpDiscuz

CVE-2025-4224wpForo + wpForo Advanced Attachments <= 3.1.3 - Unauthenticated Stored Cross-Site ScriptinggVectors wpForo + wpForo Advanced Attachments

CVE-2024-43289WordPress wpForo Forum plugin <= 2.3.4 - Unauthenticated Sensitive Data Exposure vulnerabilitygVectors Team wpForo Forum

CVE-2024-43288WordPress wpForo Forum plugin <= 2.3.4 - Insecure Direct Object References (IDOR) vulnerabilitygVectors Team wpForo Forum

CVE-2024-35681WordPress wpDiscuz plugin <= 7.6.18 - Cross Site Scripting (XSS) vulnerabilitygVectors Team wpDiscuz

CVE-2023-51691WordPress wpDiscuz Plugin <= 7.6.12 is vulnerable to Cross Site Scripting (XSS)gVectors Team Comments – wpDiscuz

CVE-2023-49759WordPress WooDiscuz – WooCommerce Comments Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)gVectors Team WooDiscuz – WooCommerce Comments

CVE-2023-47872WordPress wpForo Forum Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS)gVectors Team wpForo Forum

CVE-2023-47870WordPress wpForo Forum Plugin <= 2.2.6 is vulnerable to Broken Access Control and Cross Site Request Forgery (CSRF)gVectors Team wpForo Forum

CVE-2023-47869WordPress wpForo plugin <= 2.2.5 - Broken Access Control + CSRF vulnerabilitygVectors Team wpForo Forum

CVE-2023-47775WordPress wpDiscuz Plugin <= 7.6.11 is vulnerable to Cross Site Request Forgery (CSRF)gVectors Team Comments — wpDiscuz

CVE-2023-47185WordPress wpDiscuz Plugin <= 7.6.11 is vulnerable to Cross Site Scripting (XSS)gVectors Team Comments — wpDiscuz

CVE-2023-46311WordPress wpDiscuz Plugin <= 7.6.3 is vulnerable to Insecure Direct Object References (IDOR)gVectors Team Comments – wpDiscuz

CVE-2023-46310WordPress wpDiscuz plugin <= 7.6.10 - Content Injection vulnerabilitygVectors Team wpDiscuz

CVE-2023-33216WordPress WooDiscuz – WooCommerce Comments Plugin <= 2.2.9 is vulnerable to Cross Site Scripting (XSS)gVectors Team WooDiscuz – WooCommerce Comments

CVE-2023-33213WordPress wpView Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)gVectors Display Custom Fields – wpView

CVE-2022-43492WordPress Comments – wpDiscuz plugin 7.4.2 - Auth. Insecure Direct Object References (IDOR) vulnerabilitygVectors Team Comments – wpDiscuz (WordPress plugin)

CVE-2022-40632WordPress wpForo Forum plugin <= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerabilitygVectors Team wpForo Forum (WordPress plugin)

CVE-2022-40206WordPress wpForo Forum plugin <= 2.0.5 - Insecure direct object references (IDOR) vulnerabilitygVectors Team wpForo Forum (WordPress plugin)

CVE-2022-40205WordPress wpForo Forum plugin <= 2.0.5 - Insecure direct object references (IDOR) vulnerabilitygVectors Team wpForo Forum (WordPress plugin)

CVE-2022-40200WordPress wpForo Forum plugin <= 2.0.9 - Auth. Arbitrary File Upload vulnerabilitygVectors Team wpForo Forum (WordPress plugin)

CVE-2022-40192WordPress wpForo Forum plugin <= 2.0.9 - Cross-Site Request Forgery (CSRF) vulnerabilitygVectors Team wpForo Forum (WordPress plugin)

CVE-2022-38144WordPress wpForo Forum plugin <= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerabilitygVectors Team wpForo Forum (WordPress plugin)

CVE-2022-38055WordPress wpForo Forum plugin <= 2.0.9 - Auth. HTML Injection vulnerabilitygVectors Team wpForo Forum

CVE-2022-23984WordPress wpDiscuz plugin <= 7.3.11 - Sensitive Information DisclosuregVectors Team Comments – wpDiscuz (WordPress plugin)

CVE-2021-24406wpForo Forum < 1.9.7 - Open RedirectgVectors Team wpForo Forum

45 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.