gvectors wpforo forum

Name: gvectors wpforo forum
Brand: gvectors

productUS

cpe:2.3:a:gvectors:wpforo_forum:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

3critical7high14medium0low

updated 2026-10-27

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-2249US	high8.8	60.8% (99th)	—	no fix	2023-06-09	≤ 2.1.7
CVE-2018-11709US	medium6.1	3.55% (89th)	—	1.4.12	2018-06-04	< 1.4.12
CVE-2021-24406US	medium6.1	2.92% (87th)	—	1.9.7	2021-07-06	< 1.9.7
CVE-2018-16613US	critical9.8	2.73% (86th)	—	1.5.2	2019-06-19	< 1.5.2
CVE-2022-40200US	high8.8	0.98% (62nd)	—	no fix	2022-11-17	≤ 2.0.9
CVE-2023-2309US	medium6.1	0.84% (58th)	—	2.1.9	2023-07-24	< 2.1.9
CVE-2022-40205US	medium4.3	0.55% (46th)	—	no fix	2022-11-08	≤ 2.0.5
CVE-2022-40206US	medium4.3	0.51% (43rd)	—	no fix	2022-11-08	≤ 2.0.5
CVE-2022-38144US	high8.8	0.51% (43rd)	—	no fix	2022-09-09	≤ 2.0.5
CVE-2022-40192US	high8.8	0.48% (41st)	—	no fix	2022-11-17	≤ 2.0.9
CVE-2026-28562US	critical9.8	0.48% (41st)	—	2.4.15	2026-02-28	2.4.0 → 2.4.15
CVE-2023-47868US	critical9.8	0.47% (41st)	—	2.2.4	2024-05-17	< 2.2.4
CVE-2024-3200US	medium6.5	0.46% (39th)	—	2.3.4	2024-06-01	< 2.3.4
CVE-2024-43289US	high7.5	0.45% (39th)	—	2.3.5	2024-08-26	< 2.3.5
CVE-2026-28559US	—	0.39% (33rd)	—	2.4.16	2026-02-28	2.4.0 → 2.4.16
CVE-2025-0764US	—	0.38% (32nd)	—	2.4.2	2025-02-28	< 2.4.2
CVE-2023-47872US	medium5.4	0.38% (31st)	—	no fix	2023-11-30	≤ 2.2.3
CVE-2026-28557US	—OT elevated	0.31% (24th)	—	2.4.16	2026-02-28	2.4.0 → 2.4.16
CVE-2024-43288US	high8.1	0.31% (24th)	—	2.3.5	2024-08-18	< 2.3.5
CVE-2023-47869US	medium5.4	0.30% (23rd)	—	2.2.6	2024-12-09	< 2.2.6
CVE-2026-28555US	—OT elevated	0.30% (23rd)	—	2.4.16	2026-02-28	2.4.0 → 2.4.16
CVE-2026-28554US	—OT elevated	0.30% (23rd)	—	2.4.16	2026-02-28	2.4.0 → 2.4.16
CVE-2022-40632US	medium5.4	0.29% (21st)	—	no fix	2022-11-08	≤ 2.0.5
CVE-2022-38055US	medium5.4	0.27% (19th)	—	2.1.0	2024-06-21	< 2.1.0
CVE-2023-47870US	high8.8OT elevated	0.27% (19th)	—	no fix	2023-11-30	≤ 2.2.6
CVE-2026-28561US	medium4.8	0.27% (18th)	—	2.4.16	2026-02-28	2.4.0 → 2.4.16
CVE-2026-28560US	medium4.8	0.27% (18th)	—	2.4.16	2026-02-28	2.4.0 → 2.4.16
CVE-2026-28556US	medium5.4OT elevated	0.25% (16th)	—	2.4.16	2026-02-28	2.4.0 → 2.4.16
CVE-2026-28558US	medium5.4	0.25% (16th)	—	2.4.16	2026-02-28	2.4.0 → 2.4.16

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8 CVEs
CWE-862Missing Authorization5 CVEs
CWE-352Cross-Site Request Forgery (CSRF)4 CVEs
CWE-639Authorization Bypass Through User-Controlled Key3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-80Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)2 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2 CVEs
CWE-20Improper Input Validation1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan