WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Ibtana – WordPress Website Builder

Build your dream WordPress website with Ibtana, a powerful website builder with customizable templates and drag-and-drop elements for customization.

7Reported vulnerabilities
6.4Highest CVSS score
1.2.6.4Latest version
10,000+Active installs

What to do now

Update Ibtana – WordPress Website Builder to 1.2.5.8 or later. 6 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 12, 2026 / Tested up to WordPress: 6.9.7 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2025-26891 Medium 6.4 0.3% 1.2.4.9 and earlier — February 24, 2025
CVE-2026-1834 Medium 6.4 0.2% 0 to 1.2.5.7 (inclusive) 1.2.5.8 March 31, 2026
CVE-2025-5092 Medium 6.4 0.2% 1.2.5.1 and earlier 1.2.5.2 November 19, 2025
CVE-2024-8282 Medium 5.4 0.3% Before 1.2.4.5 1.2.4.5 October 2, 2024
CVE-2023-6684 Medium 5.4 0.4% 1.2.2 and earlier 1.2.2.1 January 11, 2024
CVE-2024-5541 Medium 5.3 0.5% 1.2.3.3 and earlier 1.2.3.4 June 18, 2024
CVE-2025-59581 Medium 4.3 0.3% 1.2.5.3 and earlier 1.2.5.4 September 22, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.