PatchTheCVE: vvvebjshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-27480: givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload.https://patchthecve.com/cve/CVE-2024-27480.htmlhttps://patchthecve.com/cve/CVE-2024-27480.htmlTue, 27 Oct 2026 18:10:00 +0000CRITICAL 9.8: givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload.CVE-2024-25183: givanz VvvebJs 1.7.2 is vulnerable to Directory Traversal via scan.php.https://patchthecve.com/cve/CVE-2024-25183.htmlhttps://patchthecve.com/cve/CVE-2024-25183.htmlTue, 27 Oct 2026 18:10:00 +0000HIGH 7.5: givanz VvvebJs 1.7.2 is vulnerable to Directory Traversal via scan.php.CVE-2024-25182: givanz VvvebJs 1.7.2 suffers from a File Upload vulnerability via save.php.https://patchthecve.com/cve/CVE-2024-25182.htmlhttps://patchthecve.com/cve/CVE-2024-25182.htmlTue, 27 Oct 2026 18:10:00 +0000CRITICAL 9.8: givanz VvvebJs 1.7.2 suffers from a File Upload vulnerability via save.php.CVE-2024-25181: A critical vulnerability has been identified in givanz VvvebJs 1.7.2, which allows both Server-Side Request Fohttps://patchthecve.com/cve/CVE-2024-25181.htmlhttps://patchthecve.com/cve/CVE-2024-25181.htmlTue, 27 Oct 2026 18:10:00 +0000CRITICAL 9.1: A critical vulnerability has been identified in givanz VvvebJs 1.7.2, which allows both Server-Side Request Forgery (SSRF) and arbitrary file reading. The vulnerability stems from improper handling of user-supplied URLs in the "file_get_contents" function within the "save.php" file.