Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

vowelweb — Vulnerabilities & Security Advisories 19

Browse all 19 CVE security advisories affecting vowelweb. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Vowelweb is a web application framework primarily used for building dynamic websites and web services. Historically, it has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues, accounting for its 15 recorded CVEs. The framework's security posture has been characterized by inconsistent input validation and insufficient access controls in earlier versions. While no major public security incidents have been widely documented, the consistent pattern of vulnerabilities across multiple CVEs suggests ongoing challenges in secure coding practices. Recent versions have shown improved security, but legacy deployments may remain vulnerable to exploitation.

CVE ID Title CVSS Severity Published
CVE-2026-1984 Ibtana – Ecommerce Product Addons <= 0.4.7.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification via 'iepa_use_gt_editor' AJAX Action — Ibtana – Ecommerce Product Addons CWE-862 5.3 Medium 2026-09-19
CVE-2026-2278 VW Writer Blog <= 1.3.8 - Missing Authorization to Authenticated (Subscriber+) Theme Settings Reset — VW Writer Blog CWE-862 4.3 Medium 2026-09-19
CVE-2026-57776 WordPress VW Wedding theme <= 1.3.7 - Broken Access Control vulnerability — VW Wedding CWE-862 5.3 Medium 2026-07-13
CVE-2026-57774 WordPress VW Food Corner theme <= 1.1.0 - Broken Access Control vulnerability — VW Food Corner CWE-862 5.3 Medium 2026-07-13
CVE-2026-1834 Ibtana - WordPress Website Builder <= 1.2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode — Ibtana – WordPress Website Builder CWE-80 6.4 Medium 2026-03-31
CVE-2026-32437 WordPress VW Portfolio theme <= 1.3.3 - Broken Access Control vulnerability — VW Portfolio CWE-862 5.3 Medium 2026-03-13
CVE-2026-32436 WordPress VW Photography theme <= 1.3.8 - Broken Access Control vulnerability — VW Photography CWE-862 5.3 Medium 2026-03-13
CVE-2026-32434 WordPress VW Fitness theme <= 4.3.4 - Broken Access Control vulnerability — VW Fitness CWE-862 5.3 Medium 2026-03-13
CVE-2026-32438 WordPress VW School Education theme <= 1.4.6 - Broken Access Control vulnerability — VW School Education CWE-862 5.3 Medium 2026-03-13
CVE-2026-32435 WordPress VW Pet Shop theme <= 1.4.7 - Broken Access Control vulnerability — VW Pet Shop CWE-862 5.3 Medium 2026-03-13
CVE-2026-32427 WordPress VW Education Lite plugin <= 2.2.0 - Broken Access Control vulnerability — VW Education Lite CWE-862 5.3 Medium 2026-03-13
CVE-2025-39385 WordPress Sirat theme <= 1.5.1 - Broken Access Control vulnerability — Sirat CWE-862 4.3 Medium 2025-04-24
CVE-2025-26955 WordPress Industrial Lite theme <= 1.0.8 - Broken Access Control vulnerability — Industrial Lite CWE-862 4.3 Medium 2025-04-15
CVE-2024-13686 VW Storefront <= 0.9.9 - Missing Authorization to Authenticated (Subscriber+) Settings Reset — VW Storefront CWE-862 4.3 Medium 2025-03-04
CVE-2024-56234 WordPress VW Automobile Lite theme <= 2.1 - Broken Access Control vulnerability — VW Automobile Lite CWE-862 5.4 Medium 2024-12-31
CVE-2024-37123 WordPress Ibtana – WordPress Website Builder plugin <= 1.2.3.3 - Broken Access Control vulnerability — Ibtana CWE-862 5.3 Medium 2024-11-01
CVE-2024-8282 Ibtana – WordPress Website Builder <= 1.2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute — Ibtana – WordPress Website Builder CWE-79 6.4 Medium 2024-10-02
CVE-2024-5541 Ibtana - WordPress Website Builder <= 1.2.3.3 - Unauthenticated reCAPTCHA Settings Update — Ibtana – WordPress Website Builder CWE-862 5.3 Medium 2024-06-18
CVE-2023-6684 Ibtana – WordPress Website Builder <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode — Ibtana – WordPress Website Builder CWE-79 6.4 Medium 2024-01-11

This page lists every published CVE security advisory associated with vowelweb. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.