Login Request a demo
CP
Product
Colibri Page Builder
by extendthemes · last CVE Oct 16, 2026
20
CVEs
0
On KEV
7.2
Max CVSS
1
New 30D
Vulnerabilities20In the news0Timeline
Severity mix
Critical 0High 1Medium 19Low 0
Severity
All severities20Critical0High1Medium19Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Colibri Page Builder to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-11747
6.4
0%
Dec 19
Colibri Page Builder <= 1.0.345 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Affected: through 1.0.345
CVE-2025-11376
6.4
0%
Dec 13
Colibri Page Builder <= 1.0.335 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 1.0.335
CVE-2025-9560
6.4
0%
Oct 11
Colibri Page Builder <= 1.0.334 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_newsletter Shortcode
Affected: through 1.0.334
CVE-2024-5020
6.4
0%
Dec 4
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library
Affected: through 1.0.286
CVE-2025-59593
5.9
0%
Oct 22
WordPress Colibri Page Builder Plugin < 1.0.334 - Cross Site Scripting (XSS) Vulnerability
Affected: before 1.0.334
CVE-2025-32185
5.4
0%
Apr 4
WordPress Colibri Page Builder plugin <= 1.0.329 - Cross Site Scripting (XSS) vulnerability
Affected: before 1.0.332
CVE-2024-4451
5.4
0%
Jun 7
Colibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_video_player Shortcode
Affected: through 1.0.276
CVE-2024-5038
5.4
0%
Jun 6
Colibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Affected: through 1.0.276
CVE-2024-3340
5.4
0%
May 2
Colibri Page Builder <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri-gallery-slideshow' Shortcode
Affected: through 1.0.272
CVE-2024-3337
5.4
0%
May 2
Colibri Page Builder <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri_breadcrumb_element' Shortcode
Affected: through 1.0.272
CVE-2024-3338
5.4
0%
May 2
Colibri Page Builder <= 1.0.262 - Authenticated (Author+) Stored Cross-Site Scripting
Affected: through 1.0.262
CVE-2024-2839
5.4
0%
Apr 2
Colibri Page Builder <= 1.0.263 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 1.0.263
CVE-2023-6988
5.4
0%
Jan 11
Colibri Page Builder <= 1.0.239 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Affected: through 1.0.239
CVE-2023-50833
5.4
0%
Dec 21
WordPress Colibri Page Builder Plugin <= 1.0.239 is vulnerable to Cross Site Scripting (XSS)
Affected: through 1.0.239
CVE-2023-2188
4.9
1%
Aug 31
Colibri Page Builder <= 1.0.227 - Authenticated (Administrator+) SQL Injection via post_id
Affected: through 1.0.227
CVE-2024-28004
4.3
0%
Mar 28
WordPress Colibri Page Builder plugin <= 1.0.248 - Broken Access Control vulnerability
Affected: through 1.0.248
CVE-2024-1870
4.3
0%
Mar 9
Colibri Page Builder <= 1.0.260 - Missing Authorization
Affected: through 1.0.260
CVE-2024-1362
4.3
0%
Feb 23
Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via cp_shortcode_refresh
Affected: through 1.0.253
CVE-2024-1361
4.3
0%
Feb 23
Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via extend_builder
Affected: through 1.0.253
Showing 19