Avirtum
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| iPanorama 360 WordPress Virtual Tour Builder | 2 | – | Nov 1, 2024 |
| iPages Flipbook | 2 | – | Jun 17, 2026 |
| iFolders | 1 | – | Sep 25, 2023 |
| iPanorama 360 – Advanced Virtual Tour Builder | 1 | – | Oct 19, 2023 |
| Vision Interactive | 1 | – | Jun 9, 2024 |
| iPages Flipbook For WordPress | 1 | – | Dec 20, 2023 |
| ImageLinks Interactive Image Builder for WordPress | 1 | – | Nov 6, 2023 |
Exploited and recent CVEs
- CVE-2024-33909 WordPress iPages Flipbook plugin <= 1.5.1 - Broken Access Control vulnerability 0.2%
- CVE-2024-38690 WordPress iPanorama 360 plugin <= 1.8.3 - Broken Access Control vulnerability 0.4%
- CVE-2024-4744 WordPress iPages Flipbook plugin <= 1.5.1 - Broken Access Control vulnerability 0.2%
- CVE-2024-32779 WordPress Vision – Image Map Builder plugin <= 1.7.1 - Broken Access Control vulnerability 0.3%
- CVE-2024-33941 WordPress iPanorama 360 plugin <= 1.8.1 - Broken Access Control vulnerability 0.4%
- CVE-2023-47236 WordPress iPages Flipbook Plugin <= 1.4.8 is vulnerable to SQL Injection 0.5%
- CVE-2023-46823 WordPress ImageLinks Interactive Image Builder Plugin <= 1.5.4 is vulnerable to SQL Injection 0.8%
- CVE-2023-5336 iPanorama 360 – WordPress Virtual Tour Builder <= 1.8.0 - Authenticated (Contributor+) SQL Injection via Shortcode 0.8%
- CVE-2023-41949 WordPress iFolders Plugin <= 1.5.0 is vulnerable to Cross Site Scripting (XSS) 0.4%