Skip to content

Extendthemes Colibri Page Builder vulnerabilities

extend themes colibri page builderColibri Page Builder <= 1.0.390 - Unauthenticated Stored Cross-Site Scripting via CommentsCVE-2026-1077587.2 HighOctober 16, 2026
extend themes colibri page builderColibri Page Builder <= 1.0.345 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2025-117476.4 MediumDecember 19, 2025
extend themes colibri page builderColibri Page Builder <= 1.0.335 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-113766.4 MediumDecember 13, 2025
extend themes colibri page builderColibri Page Builder <= 1.0.334 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_newsletter ShortcodeCVE-2025-95606.4 MediumOctober 11, 2025
10web form maker by 10web – mobile-friendly drag & drop contact form builder, bqworks accordion slider, colorlibplugins fancybox for wordpress +13 more +15 moreMultiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript LibraryCVE-2024-50206.4 MediumDecember 4, 2024
extend themes colibri page builderColibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_video_player ShortcodeCVE-2024-44516.4 MediumJune 7, 2024
extend themes colibri page builderColibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-50386.4 MediumJune 6, 2024
extend themes colibri page builderColibri Page Builder <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri-gallery-slideshow' ShortcodeCVE-2024-33405.4 MediumMay 2, 2024
extend themes colibri page builderColibri Page Builder <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri_breadcrumb_element' ShortcodeCVE-2024-33376.4 MediumMay 2, 2024
extend themes colibri page builderColibri Page Builder <= 1.0.262 - Authenticated (Author+) Stored Cross-Site ScriptingCVE-2024-33384.4 MediumMay 2, 2024
extend themes colibri page builderColibri Page Builder <= 1.0.263 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-28396.4 MediumApril 2, 2024
extend themes colibri page builderWordPress Colibri Page Builder plugin <= 1.0.248 - Broken Access Control vulnerabilityCVE-2024-280045.4 MediumMarch 28, 2024
extend themes colibri page builderColibri Page Builder <= 1.0.260 - Missing AuthorizationCVE-2024-18704.3 MediumMarch 9, 2024
extend themes colibri page builderColibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via cp_shortcode_refreshCVE-2024-13624.3 MediumFebruary 23, 2024
extend themes colibri page builderColibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via extend_builderCVE-2024-13614.3 MediumFebruary 23, 2024
extend themes colibri page builderColibri Page Builder <= 1.0.239 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2023-69886.4 MediumJanuary 11, 2024
extend themes colibri page builderWordPress Colibri Page Builder Plugin <= 1.0.239 is vulnerable to Cross Site Scripting (XSS)CVE-2023-508336.5 MediumDecember 21, 2023
extend themes colibri page builderColibri Page Builder <= 1.0.227 - Authenticated (Administrator+) SQL Injection via post_idCVE-2023-21887.2 HighAugust 31, 2023