Advisories · Technology
vowelweb Ibtana – WordPress Website Builder.
Every CVE that names vowelweb Ibtana – WordPress Website Builder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
Ibtana - WordPress Website Builder <= 1.2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- vowelweb Ibtana – WordPress Website Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library
- lightgalleryteam LightGallery WP
- tplugins TP WooCommerce Product Gallery
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Ibtana – WordPress Website Builder <= 1.2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute
- vowelweb Ibtana – WordPress Website Builder
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Ibtana - WordPress Website Builder <= 1.2.3.3 - Unauthenticated reCAPTCHA Settings Update
- vowelweb Ibtana – WordPress Website Builder
- Broken access control
- CVSS 6.4 Medium
Ibtana – WordPress Website Builder <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- vowelweb Ibtana – WordPress Website Builder
- Cross-site scripting (XSS)