Skip to content
Noroxi

gVectors records

70 published records for vendor gvectors.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 1.4%
Pre-auth RCE
4
With a fix record
21.4%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25
  9. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

70 records
  • CVE-2020-24186
    68This week

    A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allows unauthenticated u

    CriticalCVSS 10.0WeaponizedEPSS 94%

    gvectors · wpdiscuzAug 24, 2020

  • CVE-2023-2249
    53Plan

    wpForo Forum <= 2.1.7 - Authenticated (Subscriber+) Local File Include, Server-Side Request Forgery, and PHAR Deserialization via file_get_contents

    HighCVSS 8.8No exploitEPSS 60%

    gvectors · wpforo forumJun 9, 2023

  • CVE-2020-13640
    43Plan

    A SQL injection issue in the gVectors wpDiscuz plugin 5.3.5 and earlier for WordPress allows remote attackers to execute arbitrary SQL comma

    CriticalCVSS 9.8Proof of conceptEPSS 12%

    gvectors · wpdiscuzJun 18, 2020

  • CVE-2018-16613
    40Plan

    An issue was discovered in the update function in the wpForo Forum plugin before 1.5.2 for WordPress.

    CriticalCVSS 9.8No exploitEPSS 2%

    gvectors · wpforo forumJun 19, 2019

  • CVE-2018-11515
    39Monitor

    The wpForo plugin through 2018-02-05 for WordPress has SQL Injection via a search with the /forum/ wpfo parameter.

    CriticalCVSS 9.8No exploitEPSS 1%

    gvectors · wpforoMay 28, 2018

  • CVE-2024-9488
    39Monitor

    Comments – wpDiscuz <= 7.6.24 - Authentication Bypass via WordPress.com OAuth provider

    CriticalCVSS 9.8No exploitEPSS 0%

    gvectors · wpdiscuzOct 25, 2024

  • CVE-2023-47868
    39Monitor

    WordPress wpForo plugin <= 2.2.3 - Privilege Escalation vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    gvectors · wpforo forumMay 17, 2024

  • CVE-2026-22193
    36Monitor

    wpDiscuz before 7.6.47 - SQL Injection in getAllSubscriptions()

    CriticalCVSS 9.2No exploitEPSS 0%

    gvectors · wpdiscuzMar 13, 2026

  • CVE-2022-40200
    35Monitor

    WordPress wpForo Forum plugin <= 2.0.9 - Auth. Arbitrary File Upload vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    gvectors · wpforo forumNov 17, 2022

  • CVE-2019-19109
    35Monitor

    The wpForo plugin 1.6.5 for WordPress allows wp-admin/admin.php?page=wpforo-usergroups CSRF.

    HighCVSS 8.8No exploitEPSS 0%

    gvectors · wpforoJun 15, 2020

  • CVE-2022-43492
    35Monitor

    WordPress Comments – wpDiscuz plugin 7.4.2 - Auth. Insecure Direct Object References (IDOR) vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    gvectors · wpdiscuzNov 18, 2022

  • CVE-2023-45760
    35Monitor

    WordPress wpDiscuz plugin <= 7.6.3 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    gvectors · wpdiscuzJan 2, 2025

  • CVE-2022-38144
    35Monitor

    WordPress wpForo Forum plugin <= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    gvectors · wpforo forumSep 9, 2022

  • CVE-2022-40192
    35Monitor

    WordPress wpForo Forum plugin <= 2.0.9 - Cross-Site Request Forgery (CSRF) vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    gvectors · wpforo forumNov 17, 2022

  • CVE-2026-28562
    35Monitor

    wpForo Forum 2.4.14 SQL Injection via Topics ORDER BY Parameter

    HighCVSS 8.8No exploitEPSS 0%

    gvectors · wpforo forumFeb 28, 2026

  • CVE-2026-22192
    35Monitor

    Voltronic Power SNMP Web Pro 1.1 Authentication Bypass via localStorage

    HighCVSS 8.8No exploitEPSS 0%

    gvectors · wpdiscuzMar 13, 2026

  • CVE-2023-49759
    35Monitor

    WordPress WooDiscuz – WooCommerce Comments Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    gvectors · woodiscuz - woocommerce commentsDec 18, 2023

  • CVE-2023-47870
    35Monitor

    WordPress wpForo Forum Plugin <= 2.2.6 is vulnerable to Broken Access Control and Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    gvectors · wpforo forumNov 30, 2023

  • CVE-2023-47775
    35Monitor

    WordPress wpDiscuz Plugin <= 7.6.11 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    gvectors · wpdiscuzNov 22, 2023

  • CVE-2026-22199
    34Monitor

    Voltronic Power SNMP Web Pro 1.1 Path Traversal via upload.cgi

    HighCVSS 8.7No exploitEPSS 1%

    gvectors · wpdiscuzMar 13, 2026

  • CVE-2026-22182
    34Monitor

    wpDiscuz before 7.6.47 - Unauthenticated Email Notification Flood via wpdCheckNotificationType

    HighCVSS 8.7No exploitEPSS 0%

    gvectors · wpdiscuzMar 13, 2026

  • CVE-2024-43288
    32Monitor

    WordPress wpForo Forum plugin <= 2.3.4 - Insecure Direct Object References (IDOR) vulnerability

    HighCVSS 8.1No exploitEPSS 0%

    gvectors · wpforo forumAug 18, 2024

  • CVE-2022-23984
    30Monitor

    WordPress wpDiscuz plugin <= 7.3.11 - Sensitive Information Disclosure

    HighCVSS 7.5No exploitEPSS 1%

    gvectors · wpdiscuzFeb 21, 2022

  • CVE-2024-43289
    30Monitor

    WordPress wpForo Forum plugin <= 2.3.4 - Unauthenticated Sensitive Data Exposure vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    gvectors · wpforo forumAug 26, 2024

  • CVE-2023-46309
    29Monitor

    WordPress wpDiscuz plugin <= 7.6.10 - Broken Access Control vulnerability

    HighCVSS 7.3No exploitEPSS 0%

    gvectors · wpdiscuzJan 2, 2025