Skip to content

Extendthemes vulnerabilities

Products

Newest

extendthemes kubio ai page builder Kubio AI Page Builder <= 2.9.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via kubio/shortcode Block via Product Review CVE-2026-115816 6.4 MediumNovember 7, 2026
extendthemes image hub – free images from unsplash, pixabay, pexels, openverse & giphy Image Hub <= 1.2.0 - Authenticated (Subscriber+) Sensitive Information Exposure in Admin Page HTML CVE-2026-109191 4.3 MediumOctober 16, 2026
extend themes colibri page builder Colibri Page Builder <= 1.0.390 - Unauthenticated Stored Cross-Site Scripting via Comments CVE-2026-107758 7.2 HighOctober 16, 2026
extend themes kubio ai page builder WordPress Kubio AI Page Builder plugin <= 2.9.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-94167 7.1 HighOctober 9, 2026
extendthemes kubio ai page builder Kubio AI Page Builder < 2.9.3 - Unauthenticated Stored XSS via Comment Content CVE-2026-88783 8.8 HighOctober 3, 2026
extendthemes kubio ai page builder Kubio AI Page Builder < 2.9.3 - Contributor+ Stored XSS via Image Gallery Item URL Attribute CVE-2026-88782 6.8 MediumOctober 3, 2026
extendthemes kubio ai page builder Kubio AI Page Builder <= 2.9.2 - Unauthenticated Stored Cross-Site Scripting via SVG Comment Content (KSES Allowlist Bypass) CVE-2026-100107 7.2 HighOctober 2, 2026
extendthemes kubio ai page builder Kubio AI Page Builder <= 2.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via kubio/copyright Block Content CVE-2026-14472 6.4 MediumSeptember 18, 2026
extendthemes kubio ai page builder Kubio AI Page Builder <= 2.8.5 - Missing Authorization to Authenticated (Contributor+) Front-Page/Menu/Template Configuration Reversion via kubio_restore_front_page AJAX Action CVE-2026-16779 4.3 MediumAugust 16, 2026
extendthemes kubio ai page builder Kubio AI Page Builder <= 2.7.2 - Missing Authorization to Authenticated (Contributor+) Limited File Upload via Kubio Block Attributes CVE-2026-5427 5.3 MediumApril 17, 2026
extend themes kubio ai page builder WordPress Kubio AI Page Builder plugin <= 2.7.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-34887 6.5 MediumMarch 31, 2026
extend themes vireo WordPress Vireo theme <= 1.0.24 - Broken Access Control vulnerability CVE-2025-62751 4.3 MediumDecember 31, 2025
extend themes colibri page builder Colibri Page Builder <= 1.0.345 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2025-11747 6.4 MediumDecember 19, 2025
extend themes colibri page builder Colibri Page Builder <= 1.0.335 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-11376 6.4 MediumDecember 13, 2025
extend themes colibri page builder WordPress Colibri Page Builder Plugin < 1.0.334 - Cross Site Scripting (XSS) Vulnerability CVE-2025-59593 5.9 MediumOctober 22, 2025
extend themes colibri page builder Colibri Page Builder <= 1.0.334 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_newsletter Shortcode CVE-2025-9560 6.4 MediumOctober 11, 2025
extendthemes kubio ai page builder Kubio AI Page Builder <= 2.6.3 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation CVE-2025-8487 5.4 MediumSeptember 19, 2025
extend themes colibri page builder WordPress Colibri Page Builder plugin <= 1.0.329 - Cross Site Scripting (XSS) vulnerability CVE-2025-32185 6.5 MediumApril 4, 2025
extendthemes kubio ai page builder Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion CVE-2025-2294 Public exploit EPSS 78.4% 9.8 CriticalMarch 28, 2025
extendthemes kubio ai page builder Kubio AI Page Builder <= 2.3.5 - Reflected Cross-Site Scripting CVE-2024-13516 6.1 MediumJanuary 18, 2025
dn88 highlight WordPress Highlight theme <= 1.0.29 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-37458 4.3 MediumJanuary 2, 2025
extendthemes mesmerize WordPress Mesmerize theme <= 1.6.120 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-37431 4.3 MediumJanuary 2, 2025
10web form maker by 10web – mobile-friendly drag & drop contact form builder, bqworks accordion slider, colorlibplugins fancybox for wordpress +13 more +15 more Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library CVE-2024-5020 6.4 MediumDecember 4, 2024
extendthemes kubio ai page builder WordPress Kubio AI Page Builder plugin <= 2.2.4 - Authenticated Cross Site Scripting (XSS) vulnerability CVE-2024-39661 6.5 MediumAugust 1, 2024
extendthemes materialis Materialis <= 1.1.24 - Missing Authorization to Limited Arbitrary Options Update CVE-2023-3204 6.5 MediumJune 20, 2024
extend themes colibri page builder Colibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_video_player Shortcode CVE-2024-4451 6.4 MediumJune 7, 2024
extend themes colibri page builder Colibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-5038 6.4 MediumJune 6, 2024
extendthemes materialis companion Materialis Companion <= 1.3.41 - Authenticated (Contributor+) Store Cross-Site Scripting via materialis_contact_form Shortcode CVE-2024-4707 6.4 MediumJune 6, 2024
extend themes empowerwp WordPress EmpowerWP theme <= 1.0.21 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-34809 4.3 MediumMay 17, 2024
extend themes colibri page builder Colibri Page Builder <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri-gallery-slideshow' Shortcode CVE-2024-3340 5.4 MediumMay 2, 2024
extend themes colibri page builder Colibri Page Builder <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri_breadcrumb_element' Shortcode CVE-2024-3337 6.4 MediumMay 2, 2024
extend themes colibri page builder Colibri Page Builder <= 1.0.262 - Authenticated (Author+) Stored Cross-Site Scripting CVE-2024-3338 4.4 MediumMay 2, 2024
extend themes teluro, wordpress teluro theme +1 more WordPress Teluro theme <= 1.0.31 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-33688 4.3 MediumApril 26, 2024
extend themes colibri page builder Colibri Page Builder <= 1.0.263 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-2839 6.4 MediumApril 2, 2024
extend themes colibri page builder WordPress Colibri Page Builder plugin <= 1.0.248 - Broken Access Control vulnerability CVE-2024-28004 5.4 MediumMarch 28, 2024
extend themes calliope WordPress Calliope theme <= 1.0.33 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-2904 4.3 MediumMarch 26, 2024
extend themes colibri page builder Colibri Page Builder <= 1.0.260 - Missing Authorization CVE-2024-1870 4.3 MediumMarch 9, 2024
extend themes colibri page builder Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via cp_shortcode_refresh CVE-2024-1362 4.3 MediumFebruary 23, 2024
colibriwp colibri, extend themes colibri wp +1 more Colibri WP <= 1.0.94 - Cross-Site Request Forgery to Limited Plugin Installation CVE-2024-1360 4.3 MediumFebruary 23, 2024
extend themes colibri page builder Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via extend_builder CVE-2024-1361 4.3 MediumFebruary 23, 2024
extend themes colibri page builder Colibri Page Builder <= 1.0.239 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-6988 6.4 MediumJanuary 11, 2024
extend themes colibri page builder WordPress Colibri Page Builder Plugin <= 1.0.239 is vulnerable to Cross Site Scripting (XSS) CVE-2023-50833 6.5 MediumDecember 21, 2023
extend themes colibri page builder Colibri Page Builder <= 1.0.227 - Authenticated (Administrator+) SQL Injection via post_id CVE-2023-2188 7.2 HighAugust 31, 2023
extendthemes materialis, mesmerize +1 more Mesmerize <= 1.6.89 & Materialis <= 1.0.172 - Authenticated Arbitrary Options Update CVE-2019-25142 8.8 HighJune 7, 2023
extendthemes materialis companion Materialis Companion < 1.3.40 - Contributor+ Stored XSS via Shortcode CVE-2022-4762 5.4 MediumFebruary 6, 2023
extendthemes mesmerize companion Mesmerize Companion < 1.6.135 - Contributor+ Stored XSS CVE-2022-4481 5.4 MediumJanuary 16, 2023