VowelWeb vulnerabilities

CVEs per yearBy the year they were published

1. 20245
2. 20254
3. 202611

Newest CVEs

• CVE-2026-1984

  Ibtana – Ecommerce Product Addons <= 0.4.7.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification via 'iepa_use_gt_editor' AJAX Action

  vowelweb · Ibtana – Ecommerce Product Addons

  Medium5.3
• CVE-2026-2278

  VW Writer Blog <= 1.3.8 - Missing Authorization to Authenticated (Subscriber+) Theme Settings Reset

  vowelweb · VW Writer Blog

  Medium4.3
• CVE-2026-57776

  WordPress VW Wedding theme <= 1.3.7 - Broken Access Control vulnerability

  vowelweb · VW Wedding

  Medium5.3
• CVE-2026-57774

  WordPress VW Food Corner theme <= 1.1.0 - Broken Access Control vulnerability

  vowelweb · VW Food Corner

  Medium5.3
• CVE-2026-1834

  Ibtana - WordPress Website Builder <= 1.2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

  vowelweb · Ibtana – WordPress Website Builder

  Medium6.4
• CVE-2026-32438

  WordPress VW School Education theme <= 1.4.6 - Broken Access Control vulnerability

  vowelweb · VW School Education

  Medium5.3
• CVE-2026-32437

  WordPress VW Portfolio theme <= 1.3.3 - Broken Access Control vulnerability

  vowelweb · VW Portfolio

  Medium5.3
• CVE-2026-32436

  WordPress VW Photography theme <= 1.3.8 - Broken Access Control vulnerability

  vowelweb · VW Photography

  Medium5.3
• CVE-2026-32435

  WordPress VW Pet Shop theme <= 1.4.7 - Broken Access Control vulnerability

  vowelweb · VW Pet Shop

  Medium5.3
• CVE-2026-32434

  WordPress VW Fitness theme <= 4.3.4 - Broken Access Control vulnerability

  vowelweb · VW Fitness

  Medium5.3