Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: VW THEMES Clear all filters
TI-2025-37111 CVE-2025-59581 · GHSA-72jf-7xvf-m9rh

WordPress Ibtana Plugin <= 1.2.5.3 - Arbitrary Content Deletion Vulnerability

Priority LOW 29

Missing Authorization vulnerability in VW THEMES Ibtana ibtana-visual-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ibtana: from n/a through <= 1.2.5.3.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00274 Published 2025-09-22 No fix listed CWE-862
TI-2025-36439 CVE-2025-58786 · GHSA-3x2f-6j5v-wxr6

WordPress Ibtana – Ecommerce Product Addons plugin <= 0.4.7.6 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VW THEMES Ibtana – Ecommerce Product Addons ibtana-ecommerce-product-addons allows DOM-Based XSS.This issue affects Ib…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00209 Published 2025-09-05 No fix listed CWE-79
TI-2024-12725 CVE-2024-13686 · GHSA-qqpx-3x4j-2pwg

VW Storefront <= 0.9.9 - Missing Authorization to Authenticated (Subscriber+) Settings Reset

Priority LOW 20

The VW Storefront theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the vw_storefront_reset_all_settings() function in all versions up to, and including, 0.9.9.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00291 Published 2025-03-04 No fix listed CWE-862
TI-2025-19762 CVE-2025-26891 · GHSA-4jjm-xjpc-v5gr

WordPress Ibtana plugin <= 1.2.5.9 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VW THEMES Ibtana ibtana-visual-editor allows Stored XSS.This issue affects Ibtana: from n/a through <= 1.2.5.9.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0028 Published 2025-02-25 No fix listed CWE-79