Advisories · Technology
extendthemes Colibri Page Builder.
Every CVE that names extendthemes Colibri Page Builder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
Colibri Page Builder <= 1.0.390 - Unauthenticated Stored Cross-Site Scripting via Comments
- extendthemes Colibri Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Colibri Page Builder <= 1.0.345 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- extendthemes Colibri Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Colibri Page Builder <= 1.0.335 - Authenticated (Contributor+) Stored Cross-Site Scripting
- extendthemes Colibri Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Colibri Page Builder <= 1.0.334 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_newsletter Shortcode
- extendthemes Colibri Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library
- extendthemes Colibri Page Builder
- smub Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Colibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_video_player Shortcode
- extendthemes Colibri Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Colibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- extendthemes Colibri Page Builder
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Colibri Page Builder <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri-gallery-slideshow' Shortcode
- extendthemes Colibri Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Colibri Page Builder <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri_breadcrumb_element' Shortcode
- extendthemes Colibri Page Builder
- Cross-site scripting (XSS)
- CVSS 4.4 Medium
Colibri Page Builder <= 1.0.262 - Authenticated (Author+) Stored Cross-Site Scripting
- extendthemes Colibri Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Colibri Page Builder <= 1.0.263 - Authenticated (Contributor+) Stored Cross-Site Scripting
- extendthemes Colibri Page Builder
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
WordPress Colibri Page Builder plugin <= 1.0.248 - Broken Access Control vulnerability
- ExtendThemes Colibri Page Builder
- Broken access control
- CVSS 4.3 Medium
Colibri Page Builder <= 1.0.260 - Missing Authorization
- extendthemes Colibri Page Builder
- Broken access control
- CVSS 4.3 Medium
Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via cp_shortcode_refresh
- extendthemes Colibri Page Builder
- Cross-site request forgery (CSRF)
- CVSS 4.3 Medium
Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via extend_builder
- extendthemes Colibri Page Builder
- Cross-site request forgery (CSRF)
- CVSS 6.4 Medium
Colibri Page Builder <= 1.0.239 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- extendthemes Colibri Page Builder
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
WordPress Colibri Page Builder Plugin <= 1.0.239 is vulnerable to Cross Site Scripting (XSS)
- ExtendThemes Colibri Page Builder
- Cross-site scripting (XSS)
- CVSS 7.2 High
Colibri Page Builder <= 1.0.227 - Authenticated (Administrator+) SQL Injection via post_id
- extendthemes Colibri Page Builder
- SQL injection