Ibtana – WordPress Website Builder

Vulnerabilities 10Slug ibtana-visual-editorLatest version 1.2.6.2WordPress.org →

Minimum safe version

1.2.5.8

Update to 1.2.5.8 or later to address 9 fixable vulnerabilities

Latest available1.2.6.2 ⚠ 1 vulnerability has no fix
Medium 6.5
2025-09-22< 1.2.5.4

Ibtana <= 1.2.5.3 - Missing Authorization to Authenticated (Contributor+) Arbitrary Content Deletion

N/A
2025-11-19< 1.2.5.2

Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library

N/A
2026-03-30< 1.2.5.8

Ibtana - WordPress Website Builder <= 1.2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Medium 6.5 Unfixed
2025-02-25≤ 1.2.5.9

WordPress Ibtana plugin <= 1.2.5.9 - Cross Site Scripting (XSS) vulnerability