Skip to content
Vowelweb vulnerabilities
Newest
-
vowelweb ibtana – ecommerce product addons
Ibtana – Ecommerce Product Addons <= 0.4.7.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification via 'iepa_use_gt_editor' AJAX Action
CVE-2026-1984
5.3 Medium
-
vowelweb vw writer blog
VW Writer Blog <= 1.3.8 - Missing Authorization to Authenticated (Subscriber+) Theme Settings Reset
CVE-2026-2278
4.3 Medium
-
vowelweb vw wedding
WordPress VW Wedding theme <= 1.3.7 - Broken Access Control vulnerability
CVE-2026-57776
5.3 Medium
-
vowelweb vw food corner
WordPress VW Food Corner theme <= 1.1.0 - Broken Access Control vulnerability
CVE-2026-57774
5.3 Medium
-
vowelweb ibtana – wordpress website builder
Ibtana - WordPress Website Builder <= 1.2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2026-1834
6.4 Medium
-
vowelweb vw school education
WordPress VW School Education theme <= 1.4.6 - Broken Access Control vulnerability
CVE-2026-32438
5.3 Medium
-
vowelweb vw portfolio
WordPress VW Portfolio theme <= 1.3.3 - Broken Access Control vulnerability
CVE-2026-32437
5.3 Medium
-
vowelweb vw photography
WordPress VW Photography theme <= 1.3.8 - Broken Access Control vulnerability
CVE-2026-32436
5.3 Medium
-
vowelweb vw pet shop
WordPress VW Pet Shop theme <= 1.4.7 - Broken Access Control vulnerability
CVE-2026-32435
5.3 Medium
-
vowelweb vw fitness
WordPress VW Fitness theme <= 4.3.4 - Broken Access Control vulnerability
CVE-2026-32434
5.3 Medium
-
vowelweb vw education lite
WordPress VW Education Lite plugin <= 2.2.0 - Broken Access Control vulnerability
CVE-2026-32427
5.3 Medium
-
famethemes onepress, galaxyweblinks gallery with thumbnail slider, lightgalleryteam lightgallery wp +5 more +7 more
Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library
CVE-2025-5092
6.4 Medium
-
vowelweb sirat
WordPress Sirat theme <= 1.5.1 - Broken Access Control vulnerability
CVE-2025-39385
4.3 Medium
-
vowelweb industrial lite
WordPress Industrial Lite theme <= 1.0.8 - Broken Access Control vulnerability
CVE-2025-26955
4.3 Medium
-
vowelweb vw storefront
VW Storefront <= 0.9.9 - Missing Authorization to Authenticated (Subscriber+) Settings Reset
CVE-2024-13686
4.3 Medium
-
vowelweb vw automobile lite, vw themes automobile lite +1 more
WordPress VW Automobile Lite theme <= 2.1 - Broken Access Control vulnerability
CVE-2024-56234
5.4 Medium
-
vowelweb ibtana
WordPress Ibtana – WordPress Website Builder plugin <= 1.2.3.3 - Broken Access Control vulnerability
CVE-2024-37123
5.3 Medium
-
vowelweb ibtana, ibtana – wordpress website builder +1 more
Ibtana – WordPress Website Builder <= 1.2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute
CVE-2024-8282
6.4 Medium
-
vowelweb ibtana, ibtana – wordpress website builder +1 more
Ibtana - WordPress Website Builder <= 1.2.3.3 - Unauthenticated reCAPTCHA Settings Update
CVE-2024-5541
5.3 Medium
-
vowelweb ibtana, ibtana – wordpress website builder +1 more
Ibtana – WordPress Website Builder <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-6684
6.4 Medium
-
unknown ibtana
Ibtana – WordPress Website Builder < 1.1.8.8 - Contributor+ Stored XSS via Shortcode
CVE-2022-4674
5.4 Medium
-
vowelweb ibtana, unknown ibtana – wordpress website builder +1 more
Ibtana < 1.1.4.9 - Subscriber+ Settings Update to Stored XSS
CVE-2021-25014
3.5 Low