ExtendThemes Colibri Page Builder

• CVE-2026-107758 High 7.2 Colibri Page Builder <= 1.0.390 - Unauthenticated Stored Cross-Site Scripting via Comments 0.4%
• CVE-2025-11747 Medium 6.4 Colibri Page Builder <= 1.0.345 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%
• CVE-2025-11376 Medium 6.4 Colibri Page Builder <= 1.0.335 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
• CVE-2025-9560 Medium 6.4 Colibri Page Builder <= 1.0.334 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_newsletter Shortcode 0.2%
• CVE-2024-5020 Medium 6.4 Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library 0.4%
• CVE-2024-4451 Medium 6.4 Colibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_video_player Shortcode 0.3%
• CVE-2024-5038 Medium 6.4 Colibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%
• CVE-2024-3340 Medium 5.4 Colibri Page Builder <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri-gallery-slideshow' Shortcode 0.4%
• CVE-2024-3337 Medium 6.4 Colibri Page Builder <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri_breadcrumb_element' Shortcode 0.4%
• CVE-2024-3338 Medium 4.4 Colibri Page Builder <= 1.0.262 - Authenticated (Author+) Stored Cross-Site Scripting 0.4%
• CVE-2024-2839 Medium 6.4 Colibri Page Builder <= 1.0.263 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
• CVE-2024-28004 Medium 5.4 WordPress Colibri Page Builder plugin <= 1.0.248 - Broken Access Control vulnerability 0.4%
• CVE-2024-1870 Medium 4.3 Colibri Page Builder <= 1.0.260 - Missing Authorization 0.4%
• CVE-2024-1362 Medium 4.3 Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via cp_shortcode_refresh 0.2%
• CVE-2024-1361 Medium 4.3 Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via extend_builder 0.2%
• CVE-2023-6988 Medium 6.4 Colibri Page Builder <= 1.0.239 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.4%
• CVE-2023-50833 Medium 6.5 WordPress Colibri Page Builder Plugin <= 1.0.239 is vulnerable to Cross Site Scripting (XSS) 0.4%
• CVE-2023-2188 High 7.2 Colibri Page Builder <= 1.0.227 - Authenticated (Administrator+) SQL Injection via post_id 0.8%