Plugin icon

Ibtana – WordPress Website Builder

ibtana-visual-editor

Vulnerabilities:

9

Last Updated:

May 2, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-03-30
Title
Ibtana - WordPress Website Builder < 1.2.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 1.2.5.8
CVSS
5.5 (medium)
Published
2025-11-19
Title
Multiple Plugins and Themes - Contributor+ DOM-Based Stored XSS via lightGallery Library
Fixed in
Fixed in 1.2.5.2
CVSS
6.4 (medium)
Published
2025-09-22
Title
Ibtana < 1.2.5.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Content Deletion
Fixed in
Fixed in 1.2.5.4
CVSS
4.3 (medium)
Published
2025-02-24
Title
Ibtana <= 1.2.5.6 - Contributor+ Stored XSS
Fixed in
No known fix
CVSS
5.9 (medium)
Published
2024-10-01
Title
Ibtana – WordPress Website Builder < 1.2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute
Fixed in
Fixed in 1.2.4.5
CVSS
6.4 (medium)
Published
2024-06-17
Title
Ibtana - WordPress Website Builder < 1.2.3.4 - Unauthenticated reCAPTCHA Settings Update
Fixed in
Fixed in 1.2.3.4
CVSS
5.3 (medium)
Published
2023-12-07
Title
Ibtana – WordPress Website Builder < 1.2.2.1 - Contributor+ Stored XSS via Shortcode
Fixed in
Fixed in 1.2.2.1
CVSS
5.9 (medium)
Published
2022-12-20
Title
Ibtana – WordPress Website Builder < 1.1.8.8 - Contributor+ Stored XSS via Shortcode
Fixed in
Fixed in 1.1.8.8
CVSS
7.1 (high)
Published
2022-01-12
Title
Ibtana < 1.1.4.9 - Subscriber+ Settings Update to Stored XSS
Fixed in
Fixed in 1.1.4.9
CVSS
6.4 (medium)