Vowelweb Ibtana
6 CVEs affecting Vowelweb Ibtana. Latest disclosed: 2024-11-01. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-8282 | Medium | 6.4 | 2024-10-02 | The Ibtana – WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘align’ attribute within the 'wp:ive/ive-produ… |
CVE-2023-6684 | Medium | 6.4 | 2024-01-11 | The Ibtana – WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ive' shortcode in versions up to, and includi… |
CVE-2022-4674 | Medium | 5.4 | 2023-02-06 | The Ibtana WordPress plugin before 1.1.8.8 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contribu… |
CVE-2024-37123 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in VowelWeb Ibtana allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ibtana: from… |
CVE-2024-5541 | Medium | 5.3 | 2024-06-18 | The Ibtana – WordPress Website Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ibtana… |
CVE-2021-25014 | Low | 3.5 | 2022-02-14 | The Ibtana WordPress plugin before 1.1.4.9 does not have authorisation and CSRF checks in the ive_save_general_settings AJAX action, allowing any authenticated… |