Extend Themes vulnerabilities

Products

• Colibri Page Builder 20
• Colibri Wp 2
• Kubio Ai Page Builder 2
• Pathway 2

Newest

• extend themes colibri page builder Colibri Page Builder <= 1.0.390 - Unauthenticated Stored Cross-Site Scripting via Comments CVE-2026-107758 7.2 HighOctober 16, 2026
• extend themes kubio ai page builder WordPress Kubio AI Page Builder plugin <= 2.9.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-94167 7.1 HighOctober 9, 2026
• extend themes kubio ai website builder WordPress Kubio AI Website Builder - Denial Of Service CVE-2026-83492 6.9 MediumAugust 31, 2026
• extend themes lead generation contact widget &amp; ai chatbot: chat button, phone call, telegram, email – siteleads WordPress Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads plugin <= 1.2.0 - Sensitive Data Exposure vulnerability CVE-2026-78268 7.5 HighAugust 24, 2026
• extend themes pathway Pathway - Unauthenticated Denial of Service via Exponential Glob Pattern Matching in Document Store CVE-2026-59094 8.7 HighJuly 2, 2026
• extend themes skyline wp WordPress Skyline WP theme <= 1.0.10 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-34810 4.3 MediumJune 17, 2026
• extend themes kubio ai page builder WordPress Kubio AI Page Builder plugin <= 2.7.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-34887 6.5 MediumMarch 31, 2026
• extend themes vireo WordPress Vireo theme <= 1.0.24 - Broken Access Control vulnerability CVE-2025-62751 4.3 MediumDecember 31, 2025
• extend themes colibri page builder Colibri Page Builder <= 1.0.345 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2025-11747 6.4 MediumDecember 19, 2025
• extend themes colibri page builder Colibri Page Builder <= 1.0.335 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-11376 6.4 MediumDecember 13, 2025
• extend themes colibri page builder WordPress Colibri Page Builder Plugin < 1.0.334 - Cross Site Scripting (XSS) Vulnerability CVE-2025-59593 5.9 MediumOctober 22, 2025
• extend themes colibri page builder Colibri Page Builder <= 1.0.334 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_newsletter Shortcode CVE-2025-9560 6.4 MediumOctober 11, 2025
• extend themes colibri page builder WordPress Colibri Page Builder plugin <= 1.0.329 - Cross Site Scripting (XSS) vulnerability CVE-2025-32185 6.5 MediumApril 4, 2025
• 10web form maker by 10web – mobile-friendly drag & drop contact form builder, bqworks accordion slider, colorlibplugins fancybox for wordpress +13 more +15 more Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library CVE-2024-5020 6.4 MediumDecember 4, 2024
• extend themes colibri page builder Colibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_video_player Shortcode CVE-2024-4451 6.4 MediumJune 7, 2024
• extend themes colibri page builder Colibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-5038 6.4 MediumJune 6, 2024
• extend themes empowerwp WordPress EmpowerWP theme <= 1.0.21 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-34809 4.3 MediumMay 17, 2024
• extend themes colibri page builder Colibri Page Builder <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri-gallery-slideshow' Shortcode CVE-2024-3340 5.4 MediumMay 2, 2024
• extend themes colibri page builder Colibri Page Builder <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri_breadcrumb_element' Shortcode CVE-2024-3337 6.4 MediumMay 2, 2024
• extend themes colibri page builder Colibri Page Builder <= 1.0.262 - Authenticated (Author+) Stored Cross-Site Scripting CVE-2024-3338 4.4 MediumMay 2, 2024
• extend themes althea wp, brite, colibri wp +4 more +6 more Broken Access Control vulnerability affecting multiple WordPress themes by Extend Themes CVE-2024-33686 4.3 MediumApril 29, 2024
• extend themes teluro, wordpress teluro theme +1 more WordPress Teluro theme <= 1.0.31 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-33688 4.3 MediumApril 26, 2024
• extend themes colibri page builder Colibri Page Builder <= 1.0.263 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-2839 6.4 MediumApril 2, 2024
• extend themes colibri page builder WordPress Colibri Page Builder plugin <= 1.0.248 - Broken Access Control vulnerability CVE-2024-28004 5.4 MediumMarch 28, 2024
• extend themes calliope WordPress Calliope theme <= 1.0.33 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-2904 4.3 MediumMarch 26, 2024
• extend themes colibri page builder Colibri Page Builder <= 1.0.260 - Missing Authorization CVE-2024-1870 4.3 MediumMarch 9, 2024
• extend themes colibri page builder Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via cp_shortcode_refresh CVE-2024-1362 4.3 MediumFebruary 23, 2024
• colibriwp colibri, extend themes colibri wp +1 more Colibri WP <= 1.0.94 - Cross-Site Request Forgery to Limited Plugin Installation CVE-2024-1360 4.3 MediumFebruary 23, 2024
• extend themes colibri page builder Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via extend_builder CVE-2024-1361 4.3 MediumFebruary 23, 2024
• extend themes colibri page builder Colibri Page Builder <= 1.0.239 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-6988 6.4 MediumJanuary 11, 2024
• extend themes colibri page builder WordPress Colibri Page Builder Plugin <= 1.0.239 is vulnerable to Cross Site Scripting (XSS) CVE-2023-50833 6.5 MediumDecember 21, 2023
• extend themes colibri page builder Colibri Page Builder <= 1.0.227 - Authenticated (Administrator+) SQL Injection via post_id CVE-2023-2188 7.2 HighAugust 31, 2023