Vvveb vulnerabilities
We track 3 vulnerabilities in Vvveb products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 20, 2026.
Latest Vvveb vulnerabilities
- 9.1 Critical severity
Vvveb CMS: Unrestricted Upload of File with Dangerous Type
Vvveb CMS before 1.0.8.2 contains a remote code execution vulnerability in its media management functionality where a missing return statement in the file rename handler allows authenticated attackers to rename files to blocked extensions .php or .htaccess. At
- 8.8 High severity
Vvveb CMS: Unrestricted Upload of File with Dangerous Type
Vvveb CMS 1.0.8.2 contains a remote code execution vulnerability in its media upload handler that allows authenticated attackers to execute arbitrary operating system commands by uploading a PHP webshell with a .phtml extension. Attackers can bypass the extens
- 9.1 Critical severity
Vvvebjs: Server-Side Request Forgery
A critical vulnerability has been identified in givanz VvvebJs 1.7.2, which allows both Server-Side Request Forgery (SSRF) and arbitrary file reading. The vulnerability stems from improper handling of user-supplied URLs in the "file_get_contents" function with