CVE Tools
Track your stack

Vowelweb

7 CVEs tracked since 2026. Since Mar 2026, none of them reached CISA KEV.

Vowelweb CVEs per month

Mar 2026 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Vowelweb CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-0370
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Vowelweb's monthly top three, with their CVEs summed over those months.

  1. Ibtana – WordPress Website Builder11 month
  2. Vw Education Lite11 month
  3. Vw Fitness11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Vowelweb.

  1. CVE-2026-1984Ibtana – Ecommerce Product Addons <= 0.4.7.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification via 'iepa_use_gt_editor' AJAX Action5.3
  2. CVE-2026-2278VW Writer Blog <= 1.3.8 - Missing Authorization to Authenticated (Subscriber+) Theme Settings Reset4.3
  3. CVE-2026-57774WordPress VW Food Corner theme <= 1.1.0 - Broken Access Control vulnerability5.3
  4. CVE-2026-57776WordPress VW Wedding theme <= 1.3.7 - Broken Access Control vulnerability5.3
  5. CVE-2026-1834Ibtana - WordPress Website Builder <= 1.2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4
  6. CVE-2026-32437WordPress VW Portfolio theme <= 1.3.3 - Broken Access Control vulnerability5.3
  7. CVE-2026-32438WordPress VW School Education theme <= 1.4.6 - Broken Access Control vulnerability5.3
  8. CVE-2026-32436WordPress VW Photography theme <= 1.3.8 - Broken Access Control vulnerability5.3
  9. CVE-2026-32434WordPress VW Fitness theme <= 4.3.4 - Broken Access Control vulnerability5.3
  10. CVE-2026-32435WordPress VW Pet Shop theme <= 1.4.7 - Broken Access Control vulnerability5.3
  11. CVE-2026-32427WordPress VW Education Lite plugin <= 2.2.0 - Broken Access Control vulnerability5.3
  12. CVE-2025-5092Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library6.4
  13. CVE-2025-39385WordPress Sirat theme <= 1.5.1 - Broken Access Control vulnerability4.3
  14. CVE-2025-26955WordPress Industrial Lite theme <= 1.0.8 - Broken Access Control vulnerability4.3
  15. CVE-2024-13686VW Storefront <= 0.9.9 - Missing Authorization to Authenticated (Subscriber+) Settings Reset4.3

The record

Peak rank
#198 in Mar 2026
Busiest month shown
Mar 2026, 7 CVEs
Months with a KEV entry
0 since Mar 2026
Monthly snapshots
1 since 2026
Vowelweb's full record, month by month