IB
Product
Ibtana
6
CVEs
0
On KEV
5.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 5Low 1
Watch
Add Ibtana to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-8282 | 5.4 | Oct 2 | Ibtana – WordPress Website Builder <= 1.2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute Affected: before 1.2.4.5 |
| CVE-2023-6684 | 5.4 | Jan 11 | The Ibtana – WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ive' shortcode in versions up to, and including, 1.2.2 due to… Affected: through 1.2.2 |
| CVE-2022-4674 | 5.4 | Feb 6 | The Ibtana WordPress plugin before 1.1.8.8 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform… Affected: before 1.1.8.8 |
| CVE-2024-37123 | 5.3 | Nov 1 | WordPress Ibtana – WordPress Website Builder plugin <= 1.2.3.3 - Broken Access Control vulnerability Affected: through 1.2.3.3 |
| CVE-2024-5541 | 5.3 | Jun 18 | Ibtana - WordPress Website Builder <= 1.2.3.3 - Unauthenticated reCAPTCHA Settings Update Affected: through 1.2.3.3 |
| CVE-2021-25014 | 3.5 | Feb 14 | The Ibtana WordPress plugin before 1.1.4.9 does not have authorisation and CSRF checks in the ive_save_general_settings AJAX action, allowing any authenticated users, such as… Affected: before 1.1.4.9 |
Showing 6