Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Webvitaly — Vulnerabilities & Security Advisories 17

Browse all 17 CVE security advisories affecting Webvitaly. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Webvitaly is a web application primarily used for content management and e-commerce platforms. Historically, the application has been susceptible to multiple vulnerability classes, including remote code execution (RCE), cross-site scripting (XSS), and privilege escalation, contributing to its 16 recorded CVEs. Security researchers have identified consistent issues in input validation and access control mechanisms. While no major public security incidents have been widely documented, the accumulation of CVEs suggests ongoing challenges in secure development practices. Organizations using Webvitaly should prioritize regular patching and security assessments to mitigate potential risks associated with these recurring vulnerability patterns.

CVE ID Title CVSS Severity Published
CVE-2026-9008 Page-list <= 6.2 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Disclosure via Shortcode Attributes — Page-list CWE-862 4.3 Medium 2026-06-06
CVE-2025-62111 WordPress Extra Shortcodes plugin <= 2.2 - Cross Site Scripting (XSS) vulnerability — Extra Shortcodes CWE-79 6.5 Medium 2025-12-31
CVE-2025-53467 WordPress Login-Logout Plugin <= 3.8 - Cross Site Scripting (XSS) Vulnerability — Login-Logout CWE-79 5.9 Medium 2025-09-22
CVE-2025-58030 WordPress Page-list Plugin <= 5.8 - Cross Site Scripting (XSS) Vulnerability — Page-list CWE-79 6.5 Medium 2025-09-22
CVE-2025-58229 WordPress Sitekit Plugin <= 2.0 - Cross Site Scripting (XSS) Vulnerability — Sitekit CWE-79 6.5 Medium 2025-09-22
CVE-2025-58832 WordPress Search by Google Plugin <= 1.9 - Cross Site Scripting (XSS) Vulnerability — Search by Google CWE-79 5.9 Medium 2025-09-05
CVE-2025-50047 WordPress Sitekit plugin <= 1.9 - Cross Site Scripting (XSS) Vulnerability — Sitekit CWE-79 6.5 Medium 2025-06-20
CVE-2025-30776 WordPress Sitekit plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability — Sitekit CWE-79 6.5 Medium 2025-03-27
CVE-2024-51896 WordPress Magic Slider plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerability — Magic Slider CWE-79 6.5 Medium 2024-11-19
CVE-2024-47382 WordPress Page-list plugin <= 5.6 - Cross Site Scripting (XSS) vulnerability — Page-list CWE-79 6.5 Medium 2024-10-05
CVE-2023-6844 iframe <= 5.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode — iframe CWE-79 5.0 Medium 2024-05-23
CVE-2024-34805 WordPress iframe plugin <= 5.0 - Cross Site Scripting (XSS) vulnerability — iFrame CWE-79 6.5 Medium 2024-05-16
CVE-2024-29111 WordPress Sitekit plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability — Sitekit CWE-79 6.5 Medium 2024-03-19
CVE-2023-52125 WordPress iFrame Plugin <= 4.8 is vulnerable to Cross Site Scripting (XSS) — iframe CWE-79 6.5 Medium 2024-01-05
CVE-2023-4919 iframe <= 4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'iframe' Shortcode — iframe CWE-79 6.4 Medium 2023-10-20
CVE-2023-5071 Sitekit <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sitekit_iframe' shortcode — Sitekit CWE-79 6.4 Medium 2023-10-20
CVE-2023-27628 WordPress Sitekit Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS) — Sitekit CWE-79 6.5 Medium 2023-09-27

This page lists every published CVE security advisory associated with Webvitaly. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.