VO
Vendor
vowelweb
24
CVEs
0
On KEV
0
New 30D
Products
IB5.4
Ibtana
VowelWeb
6 CVEs0 on KEV0 new
IW6.4
Ibtana – WordPress Website Builder
vowelweb
4 CVEs0 on KEV0 new
IE5.3
Ibtana – Ecommerce Product Addons
vowelweb
1 CVEs0 on KEV0 new
IL4.3
Industrial Lite
vowelweb
1 CVEs0 on KEV0 new
SI4.3
Sirat
vowelweb
1 CVEs0 on KEV0 new
VA5.4
VW Automobile Lite
vowelweb
1 CVEs0 on KEV0 new
VE5.3
VW Education Lite
vowelweb
1 CVEs0 on KEV0 new
VF5.3
VW Fitness
vowelweb
1 CVEs0 on KEV0 new
VF5.3
VW Food Corner
vowelweb
1 CVEs0 on KEV0 new
VP5.3
VW Pet Shop
vowelweb
1 CVEs0 on KEV0 new
VP5.3
VW Photography
vowelweb
1 CVEs0 on KEV0 new
VP5.3
VW Portfolio
vowelweb
1 CVEs0 on KEV0 new
VS5.3
VW School Education
vowelweb
1 CVEs0 on KEV0 new
VS4.3
VW Storefront
vowelweb
1 CVEs0 on KEV0 new
VW5.3
VW Wedding
vowelweb
1 CVEs0 on KEV0 new
VW4.3
VW Writer Blog
vowelweb
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-1984 | IE Ibtana – Ecommerce Product Addons vowelweb | 5.3 | Sep 19 | Ibtana – Ecommerce Product Addons <= 0.4.7.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification via 'iepa_use_gt_editor' AJAX Action |
| CVE-2026-2278 | VW VW Writer Blog vowelweb | 4.3 | Sep 19 | VW Writer Blog <= 1.3.8 - Missing Authorization to Authenticated (Subscriber+) Theme Settings Reset |
| CVE-2026-57776 | VW VW Wedding vowelweb | 5.3 | Jul 13 | WordPress VW Wedding theme <= 1.3.7 - Broken Access Control vulnerability |
| CVE-2026-57774 | VF VW Food Corner vowelweb | 5.3 | Jul 13 | WordPress VW Food Corner theme <= 1.1.0 - Broken Access Control vulnerability |
| CVE-2026-1834 | IW Ibtana – WordPress Website Builder vowelweb | 6.4 | Mar 31 | Ibtana - WordPress Website Builder <= 1.2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode |
| CVE-2026-32438 | VS VW School Education vowelweb | 5.3 | Mar 13 | WordPress VW School Education theme <= 1.4.6 - Broken Access Control vulnerability |
| CVE-2026-32437 | VP VW Portfolio vowelweb | 5.3 | Mar 13 | WordPress VW Portfolio theme <= 1.3.3 - Broken Access Control vulnerability |
| CVE-2026-32436 | VP VW Photography vowelweb | 5.3 | Mar 13 | WordPress VW Photography theme <= 1.3.8 - Broken Access Control vulnerability |
| CVE-2026-32435 | VP VW Pet Shop vowelweb | 5.3 | Mar 13 | WordPress VW Pet Shop theme <= 1.4.7 - Broken Access Control vulnerability |
| CVE-2026-32434 | VF VW Fitness vowelweb | 5.3 | Mar 13 | WordPress VW Fitness theme <= 4.3.4 - Broken Access Control vulnerability |
| CVE-2026-32427 | VE VW Education Lite vowelweb | 5.3 | Mar 13 | WordPress VW Education Lite plugin <= 2.2.0 - Broken Access Control vulnerability |
| CVE-2025-5092 | IW Ibtana – WordPress Website Builder vowelweb | 6.4 | Nov 20 | Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library |
| CVE-2025-39385 | SI Sirat vowelweb | 4.3 | Apr 24 | WordPress Sirat theme <= 1.5.1 - Broken Access Control vulnerability |
| CVE-2025-26955 | IL Industrial Lite vowelweb | 4.3 | Apr 15 | WordPress Industrial Lite theme <= 1.0.8 - Broken Access Control vulnerability |
| CVE-2024-13686 | VS VW Storefront vowelweb | 4.3 | Mar 4 | VW Storefront <= 0.9.9 - Missing Authorization to Authenticated (Subscriber+) Settings Reset |
| CVE-2024-56234 | VA VW Automobile Lite vowelweb | 5.4 | Dec 31 | WordPress VW Automobile Lite theme <= 2.1 - Broken Access Control vulnerability |
| CVE-2024-37123 | IB Ibtana VowelWeb | 5.3 | Nov 1 | WordPress Ibtana – WordPress Website Builder plugin <= 1.2.3.3 - Broken Access Control vulnerability |
| CVE-2024-8282 | IW Ibtana – WordPress Website Builder vowelweb | 5.4 | Oct 2 | Ibtana – WordPress Website Builder <= 1.2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute |
| CVE-2024-5541 | IW Ibtana – WordPress Website Builder vowelweb | 5.3 | Jun 18 | Ibtana - WordPress Website Builder <= 1.2.3.3 - Unauthenticated reCAPTCHA Settings Update |
| CVE-2023-6684 | IB Ibtana Vowelweb | 5.4 | Jan 11 | The Ibtana – WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ive' shortcode in versions up to, and including, 1.2.2 due to… |
| CVE-2022-4674 | IB Ibtana Vowelweb | 5.4 | Feb 6 | The Ibtana WordPress plugin before 1.1.8.8 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform… |
| CVE-2021-25014 | IB Ibtana Vowelweb | 3.5 | Feb 14 | The Ibtana WordPress plugin before 1.1.4.9 does not have authorisation and CSRF checks in the ive_save_general_settings AJAX action, allowing any authenticated users, such as… |