Colorlib vulnerabilities

Products

• Activello 3
• Fancybox 3
• Bonkers 2
• Coming Soon \& Maintenance Mode 2
• Illdy 2
• Newspaper X 2
• Pixova Lite 2
• Shapely 2

Newest

• colorlib fancybox, unknown fancybox for wordpress +1 more FancyBox for WordPress < 3.3.6 - Unauthenticated Stored XSS CVE-2025-3662 6.1 MediumJune 3, 2025
• colorlib simple custom post order WordPress Simple Custom Post Order plugin <= 2.5.7 - Broken Access Control vulnerability CVE-2024-49321 4.3 MediumOctober 21, 2024
• colorlib fancybox, colorlibplugins fancybox for wordpress +1 more The FancyBox for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via... CVE-2024-0662 4.4 MediumApril 9, 2024
• colorlibplugins coming soon & maintenance mode by colorlib, colorlib coming soon \& maintenance mode +1 more Coming Soon & Maintenance Mode by Colorlib <= 1.0.99 - Information Exposure CVE-2024-1473 5.3 MediumMarch 20, 2024
• colorlib activello, newspaper x, cpothemes brilliance +12 more +14 more Epsilon Framework Themes (Various Versions) - Unauthenticated Plugin Activation/Deactivation CVE-2020-36721 6.5 MediumJune 7, 2023
• colorlib activello, bonkers, illdy +14 more +16 more Epsilon Framework Themes (Various Versions) - Function Injection CVE-2020-36708 Public exploit EPSS 65.3% 9.8 CriticalJune 7, 2023
• colorlib activello theme, silkalns activello +1 more WordPress Activello Theme <= 1.4.4 is vulnerable to Cross Site Scripting (XSS) CVE-2022-45849 5.4 MediumApril 16, 2023
• colorlib activello WordPress Activello Theme <= 1.4.4 is vulnerable to Cross Site Scripting (XSS) CVE-2022-45358 5.4 MediumApril 13, 2023
• unknown coming soon & maintenance mode by colorlib, colorlib coming soon \& maintenance mode +1 more Coming Soon and Maintenance by Colorlib < 1.0.99 - Admin+ Stored Cross Site Scripting CVE-2022-1945 4.8 MediumJune 20, 2022
• colorlib fancybox The FancyBox for WordPress plugin before 3.0.3 for WordPress does not properly restrict access,... CVE-2015-1494 Public exploit 4.3 MediumFebruary 17, 2015