Lucene search
K

37 matches found

EUVD
EUVD
added 2026/03/31 6:31 a.m.3 views

EUVD-2026-17319

The Ibtana – WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ive' shortcode in all versions up to, and including, 1.2.5.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible fo...

6.4CVSS6AI score0.00048EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/03/31 5:28 a.m.22 views

CVE-2026-1834 Ibtana - WordPress Website Builder <= 1.2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Ibtana – WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ive' shortcode in all versions up to, and including, 1.2.5.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible fo...

6.4CVSS0.00048EPSS
Exploits0References5
CVE
CVE
added 2026/03/31 5:28 a.m.5 views

CVE-2026-1834

CVE-2026-1834 affects the Ibtana – WordPress Website Builder plugin for WordPress. The issue is a Stored Cross-Site Scripting vulnerability via the plugin's 'ive' shortcode in all versions up to and including 1.2.5.7 , caused by insufficient input sanitization and output escaping on user-supplied...

6.4CVSS6AI score0.00048EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/03/31 5:28 a.m.0 views

CVE-2026-1834

The Ibtana – WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ive' shortcode in all versions up to, and including, 1.2.5.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible fo...

6.4CVSS6AI score0.00048EPSS
Exploits0References6
Patchstack
Patchstack
added 2026/03/31 12:9 a.m.3 views

WordPress Ibtana - WordPress Website Builder plugin <= 1.2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

WordPress Ibtana - WordPress Website Builder plugin = 1.2.5.7 - Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Ibtana versions = 1.2.5.7...

6.4CVSS5.9AI score0.00048EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2026/03/31 12:0 a.m.3 views

WordPress plugin Ibtana – WordPress Website Builder 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

6.4CVSS6AI score0.00048EPSS
Exploits0References5
Patchstack
Patchstack
added 2025/11/20 2:28 a.m.3 views

WordPress Ibtana plugin <= 1.2.5.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ DOM-Based Stored Cross-Site Scripting vulnerability discovered by Webbernaut in WordPress Plugin Ibtana versions = 1.2.5.1...

6.4CVSS5.7AI score0.00046EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-49066

Malicious code in bioql PyPI...

6.4CVSS6.5AI score0.00246EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-58905

Malicious code in bioql PyPI...

6.4CVSS6.4AI score0.00193EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/09/22 6:25 p.m.2 views

CVE-2025-59581 WordPress Ibtana Plugin <= 1.2.5.3 - Arbitrary Content Deletion Vulnerability

Missing Authorization vulnerability in VW THEMES Ibtana allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Ibtana: from n/a through 1.2.5.3...

6.5CVSS6.6AI score0.00072EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/09/22 6:25 p.m.10 views

CVE-2025-59581 WordPress Ibtana Plugin <= 1.2.5.3 - Arbitrary Content Deletion Vulnerability

Missing Authorization vulnerability in VW THEMES Ibtana ibtana-visual-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ibtana: from n/a through = 1.2.5.3...

6.5CVSS0.00072EPSS
Exploits0References1
CVE
CVE
added 2025/09/22 6:25 p.m.11 views

CVE-2025-59581

CVE-2025-59581 - Ibtana (WordPress Website Builder) Missing Authorization vulnerability present in Ibtana, allowing Arbitrary Content Deletion due to improper access control. Affected versions: up to 1.2.5.3 (from n/a to 1.2.5.3). Connected docs corroborate the issue as an access-control weakness...

6.5CVSS5.9AI score0.00072EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/09/22 12:0 a.m.1 views

WordPress plugin Ibtana 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

6.5CVSS6.4AI score0.00072EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:38 a.m.16 views

CVE-2024-8282

The Ibtana – WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘align’ attribute within the 'wp:ive/ive-productscarousel' Gutenberg block in all versions up to, and including, 1.2.4.4 due to insufficient input sanitization and output escaping. Thi...

6.4CVSS5.8AI score0.00246EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/02/25 2:17 p.m.3 views

CVE-2025-26891 WordPress Ibtana plugin <= 1.2.5.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VW THEMES Ibtana ibtana-visual-editor allows Stored XSS.This issue affects Ibtana: from n/a through = 1.2.5.9...

6.5CVSS7.2AI score0.00112EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/02/24 10:57 a.m.2 views

WordPress Ibtana plugin <= 1.2.5.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis in WordPress Plugin Ibtana versions = 1.2.5.6...

6.5CVSS6.1AI score0.00112EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2024/11/01 12:0 a.m.2 views

WordPress plugin Ibtana 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

5.3CVSS6.6AI score0.00177EPSS
Exploits0References1
OSV
OSV
added 2024/10/02 10:15 a.m.3 views

CVE-2024-8282

The Ibtana – WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘align’ attribute within the 'wp:ive/ive-productscarousel' Gutenberg block in all versions up to, and including, 1.2.4.4 due to insufficient input sanitization and output escaping. Thi...

5.4CVSS5.9AI score0.00246EPSS
Exploits0References4
NVD
NVD
added 2024/10/02 10:15 a.m.8 views

CVE-2024-8282

The Ibtana – WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘align’ attribute within the 'wp:ive/ive-productscarousel' Gutenberg block in all versions up to, and including, 1.2.4.4 due to insufficient input sanitization and output escaping. Thi...

6.4CVSS0.00246EPSS
Exploits0References4
Patchstack
Patchstack
added 2024/10/02 12:48 a.m.2 views

WordPress Ibtana plugin <= 1.2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via align Attribute vulnerability discovered by Francesco Carlucci in WordPress Plugin Ibtana versions = 1.2.4.4...

6.4CVSS5.8AI score0.00246EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder