Iteras vulnerabilities

Products

• Iteras 2

Newest

• iteras ITERAS <= 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes CVE-2026-4078 6.4 MediumApril 24, 2026
• iteras peppol-py Peppol-py is vulnerable to XXE attacks due to Saxon configuration CVE-2025-66371 Fix available 5.0 MediumNovember 28, 2025
• iteras WordPress ITERAS plugin <= 1.8.0 - CSRF to Stored XSS vulnerability CVE-2024-53710 7.1 HighDecember 2, 2024