Extend Themes
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Colibri Page Builder | 2 | – | Oct 22, 2025 |
| Kubio AI Page Builder | 2 | – | Oct 9, 2026 |
| Calliope | 1 | – | Mar 26, 2024 |
| Colibri WP | 1 | – | Apr 29, 2024 |
| Elevate WP | 1 | – | Apr 29, 2024 |
| EmpowerWP | 1 | – | May 17, 2024 |
| Hugo WP | 1 | – | Apr 29, 2024 |
| Kubio AI Website Builder | 1 | – | Aug 31, 2026 |
| Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads | 1 | – | Aug 24, 2026 |
| Pathway | 1 | – | Apr 29, 2024 |
| Skyline WP | 1 | – | Jun 17, 2026 |
| Teluro | 1 | – | Apr 26, 2024 |
| Althea WP | 1 | – | Apr 29, 2024 |
| Vertice | 1 | – | Apr 29, 2024 |
| Brite | 1 | – | Apr 29, 2024 |
Exploited and recent CVEs
- CVE-2026-94167 WordPress Kubio AI Page Builder plugin <= 2.9.3 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-83492 WordPress Kubio AI Website Builder - Denial Of Service 0.4%
- CVE-2026-78268 WordPress Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads plugin <= 1.2.0 - Sensitive Data Exposure vulnerability 0.4%
- CVE-2024-34810 WordPress Skyline WP theme <= 1.0.10 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
- CVE-2026-34887 WordPress Kubio AI Page Builder plugin <= 2.7.0 - Cross Site Scripting (XSS) vulnerability 0.1%
- CVE-2025-59593 WordPress Colibri Page Builder Plugin < 1.0.334 - Cross Site Scripting (XSS) Vulnerability 0.2%
- CVE-2025-32185 WordPress Colibri Page Builder plugin <= 1.0.329 - Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2024-34809 WordPress EmpowerWP theme <= 1.0.21 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2024-33686 Broken Access Control vulnerability affecting multiple WordPress themes by Extend Themes 0.5%
- CVE-2024-33686 Broken Access Control vulnerability affecting multiple WordPress themes by Extend Themes 0.5%
- CVE-2024-33686 Broken Access Control vulnerability affecting multiple WordPress themes by Extend Themes 0.5%
- CVE-2024-33686 Broken Access Control vulnerability affecting multiple WordPress themes by Extend Themes 0.5%
- CVE-2024-33686 Broken Access Control vulnerability affecting multiple WordPress themes by Extend Themes 0.5%
- CVE-2024-33686 Broken Access Control vulnerability affecting multiple WordPress themes by Extend Themes 0.5%
- CVE-2024-33686 Broken Access Control vulnerability affecting multiple WordPress themes by Extend Themes 0.5%
- CVE-2024-33688 WordPress Teluro theme <= 1.0.31 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2024-2904 WordPress Calliope theme <= 1.0.33 - Cross Site Request Forgery (CSRF) vulnerability 0.2%