Stored Cross-Site Scripting Vulnerability in Ibtana WordPress Website Builder Plugin

CVE-2026-1834

What is CVE-2026-1834?

The Ibtana WordPress Website Builder plugin contains a vulnerability that allows for Stored Cross-Site Scripting through the use of the plugin's 'ive' shortcode. This issue arises due to inadequate input validation and output sanitization of user-supplied attributes. Authenticated attackers with contributor-level access and above can exploit this vulnerability to inject malicious web scripts into pages, which are executed whenever a user visits those compromised pages. Users and site administrators should apply the necessary security patches or updates to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References