Read the docs

VW THEMES

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

VW THEMES records in CISA KEV

No VW THEMES vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Vw Storefront 1 record LOW

Records

4 records

TI-2025-37111 CVE-2025-59581 · GHSA-72jf-7xvf-m9rh

WordPress Ibtana Plugin <= 1.2.5.3 - Arbitrary Content Deletion Vulnerability

Priority LOW 29

Missing Authorization vulnerability in VW THEMES Ibtana ibtana-visual-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ibtana: from n/a through <= 1.2.5.3.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00274 Published 2025-09-22 No fix listed CWE-862
TI-2025-19762 CVE-2025-26891 · GHSA-4jjm-xjpc-v5gr

WordPress Ibtana plugin <= 1.2.5.9 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VW THEMES Ibtana ibtana-visual-editor allows Stored XSS.This issue affects Ibtana: from n/a through <= 1.2.5.9.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0028 Published 2025-02-25 No fix listed CWE-79
TI-2025-36439 CVE-2025-58786 · GHSA-3x2f-6j5v-wxr6

WordPress Ibtana – Ecommerce Product Addons plugin <= 0.4.7.6 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VW THEMES Ibtana – Ecommerce Product Addons ibtana-ecommerce-product-addons allows DOM-Based XSS.This issue affects Ib…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00209 Published 2025-09-05 No fix listed CWE-79
TI-2024-12725 CVE-2024-13686 · GHSA-qqpx-3x4j-2pwg

VW Storefront <= 0.9.9 - Missing Authorization to Authenticated (Subscriber+) Settings Reset

Priority LOW 20

The VW Storefront theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the vw_storefront_reset_all_settings() function in all versions up to, and including, 0.9.9.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00291 Published 2025-03-04 No fix listed CWE-862
Open these records in search →