Vowelweb

16 CVEs across 14 Vowelweb products. Browse Vowelweb vulnerabilities, severities, and proof-of-concept exploits.

Vowelweb products with known CVEs

ProductCVEs
Ibtana6
Ibtana – Wordpress Website Builder5
Industrial Lite1
Sirat1
Vw Automobile Lite1
Vw Education Lite1
Vw Fitness1
Vw Food Corner1
Vw Pet Shop1
Vw Photography1
Vw Portfolio1
Vw School Education1
Vw Storefront1
Vw Wedding1
Vowelweb CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-57776Medium5.32026-07-13Missing Authorization vulnerability in vowelweb VW Wedding vw-wedding allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect…
CVE-2026-57774Medium5.32026-07-13Missing Authorization vulnerability in vowelweb VW Food Corner vw-food-corner allows Exploiting Incorrectly Configured Access Control Security Levels.This issu…
CVE-2026-1834Medium6.42026-03-31The Ibtana – WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ive' shortcode in all versions up to…
CVE-2026-32438Medium5.32026-03-13Missing Authorization vulnerability in vowelweb VW School Education vw-school-education allows Exploiting Incorrectly Configured Access Control Security Levels…
CVE-2026-32437Medium5.32026-03-13Missing Authorization vulnerability in vowelweb VW Portfolio vw-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af…
CVE-2026-32436Medium5.32026-03-13Missing Authorization vulnerability in vowelweb VW Photography vw-photography allows Exploiting Incorrectly Configured Access Control Security Levels.This issu…
CVE-2026-32435Medium5.32026-03-13Missing Authorization vulnerability in vowelweb VW Pet Shop vw-pet-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe…
CVE-2026-32434Medium5.32026-03-13Missing Authorization vulnerability in vowelweb VW Fitness vw-fitness allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect…
CVE-2026-32427Medium5.32026-03-13Missing Authorization vulnerability in vowelweb VW Education Lite vw-education-lite allows Exploiting Incorrectly Configured Access Control Security Levels.Thi…
CVE-2025-5092Medium6.42025-11-20Multiple plugins and/or themes for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled lightGallery library (<= 2.8.3) in various…
CVE-2025-39385Medium4.32025-04-24Missing Authorization vulnerability in vowelweb Sirat sirat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sirat: f…
CVE-2025-26955Medium4.32025-04-15Missing Authorization vulnerability in vowelweb Industrial Lite industrial-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This is…
CVE-2024-13686Medium4.32025-03-04The VW Storefront theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the vw_storefront_reset_all_setti…
CVE-2024-56234Medium5.42024-12-31Missing Authorization vulnerability in vowelweb VW Automobile Lite vw-automobile-lite allows Exploiting Incorrectly Configured Access Control Security Levels.T…
CVE-2024-37123Medium5.32024-11-01Missing Authorization vulnerability in VowelWeb Ibtana allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ibtana: from…
CVE-2024-8282Medium6.42024-10-02The Ibtana – WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘align’ attribute within the 'wp:ive/ive-produ…
CVE-2024-5541Medium5.32024-06-18The Ibtana – WordPress Website Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ibtana…
CVE-2023-6684Medium6.42024-01-11The Ibtana – WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ive' shortcode in versions up to, and includi…
CVE-2022-4674Medium5.42023-02-06The Ibtana WordPress plugin before 1.1.8.8 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contribu…
CVE-2021-25014Low3.52022-02-14The Ibtana WordPress plugin before 1.1.4.9 does not have authorisation and CSRF checks in the ive_save_general_settings AJAX action, allowing any authenticated…