Skip to contentVowelweb Ibtana vulnerabilities
- vowelweb ibtana – ecommerce product addonsIbtana – Ecommerce Product Addons <= 0.4.7.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification via 'iepa_use_gt_editor' AJAX ActionCVE-2026-19845.3 Medium
- vowelweb ibtana – wordpress website builderIbtana - WordPress Website Builder <= 1.2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2026-18346.4 Medium
- famethemes onepress, galaxyweblinks gallery with thumbnail slider, lightgalleryteam lightgallery wp +5 more +7 moreMultiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript LibraryCVE-2025-50926.4 Medium
- vowelweb ibtanaWordPress Ibtana – WordPress Website Builder plugin <= 1.2.3.3 - Broken Access Control vulnerabilityCVE-2024-371235.3 Medium
- vowelweb ibtana, ibtana – wordpress website builder +1 moreIbtana – WordPress Website Builder <= 1.2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via align AttributeCVE-2024-82826.4 Medium
- vowelweb ibtana, ibtana – wordpress website builder +1 moreIbtana - WordPress Website Builder <= 1.2.3.3 - Unauthenticated reCAPTCHA Settings UpdateCVE-2024-55415.3 Medium
- vowelweb ibtana, ibtana – wordpress website builder +1 moreIbtana – WordPress Website Builder <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2023-66846.4 Medium
- unknown ibtanaIbtana – WordPress Website Builder < 1.1.8.8 - Contributor+ Stored XSS via ShortcodeCVE-2022-46745.4 Medium
- vowelweb ibtana, unknown ibtana – wordpress website builder +1 moreIbtana < 1.1.4.9 - Subscriber+ Settings Update to Stored XSSCVE-2021-250143.5 Low