CVE-2007-3939: Spoonlabs Vivvo Article Management CMS

Medium severity, CVSS 6.8. EPSS: 2.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) CMS 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter.

Affected products

• Spoonlabs Vivvo Article Management CMS: up to and including 3.40

Published 2007-07-21. Last modified 2026-06-16.