Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Avirtum — Vulnerabilities & Security Advisories 9

Browse all 9 CVE security advisories affecting Avirtum. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Avirtum develops virtualization solutions for enterprise environments, enabling efficient resource allocation and isolated system operations. Historically, the product has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues, accounting for its eight recorded CVEs. Notable security characteristics include insufficient input validation and improper access controls in its web management interface. While no major public security incidents have been documented, the consistent pattern of vulnerabilities suggests ongoing challenges in secure coding practices, particularly in handling user-supplied data and enforcing permission boundaries within its virtualization architecture.

CVE ID Title CVSS Severity Published
CVE-2024-33909 WordPress iPages Flipbook plugin <= 1.5.1 - Broken Access Control vulnerability — iPages Flipbook CWE-862 5.3 Medium 2026-06-17
CVE-2024-38690 WordPress iPanorama 360 plugin <= 1.8.3 - Broken Access Control vulnerability — iPanorama 360 WordPress Virtual Tour Builder CWE-862 5.3 Medium 2024-11-01
CVE-2024-4744 WordPress iPages Flipbook plugin <= 1.5.1 - Broken Access Control vulnerability — iPages Flipbook CWE-862 5.3 Medium 2024-06-10
CVE-2024-32779 WordPress Vision – Image Map Builder plugin <= 1.7.1 - Broken Access Control vulnerability — Vision Interactive CWE-862 5.3 Medium 2024-06-09
CVE-2024-33941 WordPress iPanorama 360 plugin <= 1.8.1 - Broken Access Control vulnerability — iPanorama 360 WordPress Virtual Tour Builder CWE-862 5.3 Medium 2024-05-03
CVE-2023-47236 WordPress iPages Flipbook Plugin <= 1.4.8 is vulnerable to SQL Injection — iPages Flipbook For WordPress CWE-89 7.6 High 2023-12-20
CVE-2023-46823 WordPress ImageLinks Interactive Image Builder Plugin <= 1.5.4 is vulnerable to SQL Injection — ImageLinks Interactive Image Builder for WordPress CWE-89 7.6 High 2023-11-06
CVE-2023-5336 iPanorama 360 – WordPress Virtual Tour Builder <= 1.8.0 - Authenticated (Contributor+) SQL Injection via Shortcode — iPanorama 360 – Advanced Virtual Tour Builder CWE-89 8.8 High 2023-10-19
CVE-2023-41949 WordPress iFolders Plugin <= 1.5.0 is vulnerable to Cross Site Scripting (XSS) — iFolders CWE-79 5.9 Medium 2023-09-25

This page lists every published CVE security advisory associated with Avirtum. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.