Ibtana – WordPress Website Builder vulnerabilities

Product

Ibtana – WordPress Website Builder

by vowelweb · last CVE Mar 31, 2026

CVEs

On KEV

6.4

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 4Low 0

Severity

Exploitation

Watch

Add Ibtana – WordPress Website Builder to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-1834	6.4	0%	Mar 31	Ibtana - WordPress Website Builder <= 1.2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Affected: through 1.2.5.7
CVE-2025-5092	6.4	0%	Nov 20	Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library Affected: through 1.2.5.1
CVE-2024-8282	5.4	0%	Oct 2	Ibtana – WordPress Website Builder <= 1.2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute Affected: through 1.2.4.4
CVE-2024-5541	5.3	0%	Jun 18	Ibtana - WordPress Website Builder <= 1.2.3.3 - Unauthenticated reCAPTCHA Settings Update Affected: through 1.2.3.3