VowelWeb
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Ibtana – WordPress Website Builder | 5 | – | Mar 31, 2026 |
| Ibtana – Ecommerce Product Addons | 1 | – | Sep 19, 2026 |
| Industrial Lite | 1 | – | Apr 15, 2025 |
| Sirat | 1 | – | Apr 24, 2025 |
| VW Automobile Lite | 1 | – | Dec 31, 2024 |
| VW Education Lite | 1 | – | Mar 13, 2026 |
| VW Fitness | 1 | – | Mar 13, 2026 |
| VW Food Corner | 1 | – | Jul 13, 2026 |
| VW Pet Shop | 1 | – | Mar 13, 2026 |
| VW Photography | 1 | – | Mar 13, 2026 |
| VW Portfolio | 1 | – | Mar 13, 2026 |
| VW School Education | 1 | – | Mar 13, 2026 |
| VW Storefront | 1 | – | Mar 4, 2025 |
| VW Wedding | 1 | – | Jul 13, 2026 |
| Ibtana | 1 | – | Nov 1, 2024 |
| VW Writer Blog | 1 | – | Sep 19, 2026 |
Exploited and recent CVEs
- CVE-2026-1984 Ibtana – Ecommerce Product Addons <= 0.4.7.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification via 'iepa_use_gt_editor' AJAX Action 0.4%
- CVE-2026-2278 VW Writer Blog <= 1.3.8 - Missing Authorization to Authenticated (Subscriber+) Theme Settings Reset 0.3%
- CVE-2026-57776 WordPress VW Wedding theme <= 1.3.7 - Broken Access Control vulnerability 0.4%
- CVE-2026-57774 WordPress VW Food Corner theme <= 1.1.0 - Broken Access Control vulnerability 0.4%
- CVE-2026-1834 Ibtana - WordPress Website Builder <= 1.2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.2%
- CVE-2026-32438 WordPress VW School Education theme <= 1.4.6 - Broken Access Control vulnerability 0.3%
- CVE-2026-32437 WordPress VW Portfolio theme <= 1.3.3 - Broken Access Control vulnerability 0.3%
- CVE-2026-32436 WordPress VW Photography theme <= 1.3.8 - Broken Access Control vulnerability 0.3%
- CVE-2026-32435 WordPress VW Pet Shop theme <= 1.4.7 - Broken Access Control vulnerability 0.2%
- CVE-2026-32434 WordPress VW Fitness theme <= 4.3.4 - Broken Access Control vulnerability 0.2%
- CVE-2026-32427 WordPress VW Education Lite plugin <= 2.2.0 - Broken Access Control vulnerability 0.3%
- CVE-2025-5092 Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library 0.3%
- CVE-2025-39385 WordPress Sirat theme <= 1.5.1 - Broken Access Control vulnerability 0.3%
- CVE-2025-26955 WordPress Industrial Lite theme <= 1.0.8 - Broken Access Control vulnerability 0.3%
- CVE-2024-13686 VW Storefront <= 0.9.9 - Missing Authorization to Authenticated (Subscriber+) Settings Reset 0.3%
- CVE-2024-56234 WordPress VW Automobile Lite theme <= 2.1 - Broken Access Control vulnerability 0.3%
- CVE-2024-37123 WordPress Ibtana – WordPress Website Builder plugin <= 1.2.3.3 - Broken Access Control vulnerability 0.4%
- CVE-2024-8282 Ibtana – WordPress Website Builder <= 1.2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute 0.3%
- CVE-2024-5541 Ibtana - WordPress Website Builder <= 1.2.3.3 - Unauthenticated reCAPTCHA Settings Update 0.5%
- CVE-2023-6684 Ibtana – WordPress Website Builder <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.4%