| CVE-2026-107758 |
The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter…
|
7.2
High
|
Oct 16, 2026 |
| CVE-2025-11747 |
The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the colibri_blog_posts…
|
6.4
Medium
|
Dec 19, 2025 |
| CVE-2025-11376 |
The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's…
|
6.4
Medium
|
Dec 13, 2025 |
| CVE-2025-9560 |
The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's…
|
6.4
Medium
|
Oct 11, 2025 |
| CVE-2024-5020 |
Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled FancyBox…
|
6.4
Medium
|
Dec 4, 2024 |
| CVE-2024-4451 |
The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's…
|
6.4
Medium
|
Jun 7, 2024 |
| CVE-2024-5038 |
The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s)…
|
6.4
Medium
|
Jun 6, 2024 |
| CVE-2024-3340 |
The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's…
|
5.4
Medium
|
May 2, 2024 |
| CVE-2024-3337 |
The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's…
|
6.4
Medium
|
May 2, 2024 |
| CVE-2024-3338 |
The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image alt data…
|
4.4
Medium
|
May 2, 2024 |
| CVE-2024-2839 |
The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's…
|
6.4
Medium
|
Apr 2, 2024 |
| CVE-2024-28004 |
Missing Authorization vulnerability in ExtendThemes Colibri Page Builder.This issue affects Colibri Page Builder: from…
|
5.4
Medium
|
Mar 28, 2024 |
| CVE-2024-1870 |
The Colibri Page Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing…
|
4.3
Medium
|
Mar 9, 2024 |
| CVE-2024-1362 |
The Colibri Page Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and…
|
4.3
Medium
|
Feb 23, 2024 |
| CVE-2024-1361 |
The Colibri Page Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and…
|
4.3
Medium
|
Feb 23, 2024 |
| CVE-2023-6988 |
The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's…
|
6.4
Medium
|
Jan 11, 2024 |
| CVE-2023-50833 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExtendThemes…
|
6.5
Medium
|
Dec 21, 2023 |
| CVE-2023-2188 |
The Colibri Page Builder for WordPress is vulnerable to SQL Injection via the ‘post_id’ parameter in versions up to, and…
|
7.2
High
|
Aug 31, 2023 |