By year
24
25
26
Bars are flaws published each year; the red part is the share attackers have used.
Latest high and critical flaws
- CVE-2026-112904 Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.High 8.7 · Oct 23, 2026
- CVE-2026-55232 Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.High 7.6 · Oct 1, 2026
- CVE-2026-55231 Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.High 7.2 · Oct 1, 2026
- CVE-2026-55230 Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.High 8.7 · Oct 1, 2026
- CVE-2026-54612 Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.High 8.8 · Sep 17, 2026
- CVE-2026-54507 Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.High 8.4 · Sep 17, 2026
- CVE-2026-54506 Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.High 7.6 · Sep 17, 2026
- CVE-2026-49228 Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.High 8.8 · Aug 18, 2026
- CVE-2026-49225 Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.High 8.3 · Aug 18, 2026
- CVE-2026-49224 Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.High 8.3 · Aug 18, 2026
- CVE-2026-49223 Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.High 7.6 · Aug 18, 2026
- CVE-2026-49222 Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.High 7.6 · Aug 18, 2026
- CVE-2026-49227 Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.High 7.6 · Aug 18, 2026
- CVE-2026-49226 Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.High 8.3 · Aug 18, 2026
- CVE-2026-49221 Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.High 8.8 · Aug 18, 2026
- CVE-2026-46408 Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.High 7.6 · May 15, 2026
- CVE-2026-46407 Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.High 8.1 · May 15, 2026
- CVE-2026-45800 Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.High 8.7 · May 15, 2026
- CVE-2026-44826 Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.High 7.5 · May 15, 2026
- CVE-2026-41937 Vvveb before 1.0.8.3 contains an unrestricted file upload vulnerability in the plugin upload endpoint that allows super_admin users to execute arbitrary PHP codHigh 8.6 · May 14, 2026
- CVE-2026-41935 Vvveb before 1.0.8.3 contains an uncontrolled recursion vulnerability in the admin controller dispatch cycle where Base::init() repeatedly invokes permission() High 7.1 · May 14, 2026
- CVE-2026-41938 Vvveb before version 1.0.8.2 contains an unrestricted file upload vulnerability in the media upload handler that allows authenticated users with media-upload peHigh 8.7 · May 6, 2026
- CVE-2026-41936 Vvveb before version 1.0.8.2 contains an XML external entity (XXE) injection vulnerability in the admin Tools/Import feature that allows authenticated site_admiHigh 8.6 · May 6, 2026
- CVE-2026-41934 Vvveb before version 1.0.8.2 contains an authenticated remote code execution vulnerability in the admin code editor that allows low-privilege authenticated userHigh 8.7 · May 6, 2026
- CVE-2026-39918 Vvveb prior to 1.0.8.1 contains a code injection vulnerability in the installation endpoint where the subdir POST parameter is written unsanitized into the env.Critical 9.2 · Apr 20, 2026
Part of our vulnerability database: the whole National Vulnerability Database plus CISA’s exploited list, refreshed twice a day. This is general guidance, not a review of your systems.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.