Unknown Ibtana – Wordpress Website Builder vulnerabilities

1 vulnerability

Known vulnerabilities in Unknown Ibtana – Wordpress Website Builder, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.4CVE-2021-25014unknownibtana – wordpress website builder+2
EPSS score
0.59%
The Ibtana WordPress plugin before 1.1.4.9 does not have authorisation and CSRF checks in the ive_save_general_settings AJAX action, allowing any authenticated users, such as subscriber to call it and change the plugin's settings which could lead to Stored Cross-Site Scripting issue.