Colabrio

Products

ProductCVEsExploitedLatest
Ohio Extra3–Oct 6, 2026
Stockie Extra2–Dec 18, 2025
Norebro Extra1–Dec 16, 2025

Exploited and recent CVEs

  • CVE-2026-32571 Medium 6.5 WordPress Ohio Extra plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-64225 Medium 6.5 WordPress Stockie Extra plugin <= 1.2.11 - Content Injection vulnerability 0.3%
  • CVE-2025-64633 Medium 5.3 WordPress Norebro Extra plugin <= 1.6.8 - Content Injection vulnerability 0.3%
  • CVE-2025-64365 Medium 6.5 WordPress Ohio Extra plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-64226 Medium 4.3 WordPress Stockie Extra plugin <= 1.2.11 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2025-26924 Medium 6.5 WordPress Ohio Theme Extra plugin <= 3.4.7 - Shortcode Injection vulnerability 0.3%