CVE Intelligence

sc Internet Vivoo vulnerabilities

🔔 Create alert RSS

Published CVEs affecting sc Internet Vivoo products: 3 record(s), with severity, exploitation and fixes.

WP Rentals 2WpStream 1

Exploited only (KEV) →

CVE-2026-27434 Medium · 5.3 CWE-862 Oct 7, 2026
WordPress WP Rentals theme <= 3.14.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in sc Internet Vivoo WP Rentals wprentals allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Rentals: from n/a through 3.14.2.
CVE-2026-27432 Medium · 5.4 CWE-639 Sep 4, 2026
WordPress WP Rentals theme < 3.16.0 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in sc Internet Vivoo WP Rentals allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Rentals: from n/a before 3.16.0.
CVE-2026-39527 Medium · 5.4 CWE-434 Jun 15, 2026
WordPress WpStream plugin < 4.11.2 - Arbitrary File Upload vulnerability
Subscriber Arbitrary File Upload in WpStream < 4.11.2 versions.