CO
Vendor
Colorlib
21
CVEs
0
On KEV
0
New 30D
Products
AC9.8
Activello
Colorlib
3 CVEs0 on KEV0 new
FA6.1
Fancybox
Colorlib
3 CVEs0 on KEV0 new
BO9.8
Bonkers
Colorlib
2 CVEs0 on KEV0 new
CS5.3
Coming Soon & Maintenance Mode
Colorlib
2 CVEs0 on KEV0 new
IL9.8
Illdy
Colorlib
2 CVEs0 on KEV0 new
NX9.8
Newspaper X
Colorlib
2 CVEs0 on KEV0 new
PL9.8
Pixova Lite
Colorlib
2 CVEs0 on KEV0 new
SH9.8
Shapely
Colorlib
2 CVEs0 on KEV0 new
AT5.4
Activello Theme
Colorlib
1 CVEs0 on KEV0 new
SC4.3
Simple Custom Post Order
Colorlib
1 CVEs0 on KEV0 new
SP9.8
Sparklinkg
Colorlib
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-3662 | FA Fancybox Colorlib | 6.1 | Jun 3 | FancyBox for WordPress < 3.3.6 - Unauthenticated Stored XSS |
| CVE-2024-49321 | SC Simple Custom Post Order Colorlib | 4.3 | Oct 21 | WordPress Simple Custom Post Order plugin <= 2.5.7 - Broken Access Control vulnerability |
| CVE-2024-0662 | FA Fancybox Colorlib | 4.8 | Apr 9 | The FancyBox for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions 3.0.2 to 3.3.3 due to insufficient input sanitization… |
| CVE-2024-1473 | CS Coming Soon & Maintenance Mode Colorlib | 5.3 | Mar 20 | Coming Soon & Maintenance Mode by Colorlib <= 1.0.99 - Information Exposure |
| CVE-2020-36721 | IL Illdy Colorlib | 6.5 | Jun 7 | The Brilliance <= 1.2.7, Activello <= 1.4.0, and Newspaper X <= 1.3.1 themes for WordPress are vulnerable to Plugin Activation/Deactivation |
| CVE-2020-36708 | NX Newspaper X Colorlib | 9.8 | Jun 7 | The following themes for WordPress are vulnerable to Function Injections in versions up to and including Shapely <= 1.2.7, NewsMag <= 2.4.1, Activello <= 1.4.0, Illdy <= 2.1.4,… |
| CVE-2022-45849 | AT Activello Theme Colorlib | 5.4 | Apr 16 | Auth. (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Silkalns Activello theme <= 1.4.4 versions |
| CVE-2022-45358 | AC Activello Colorlib | 5.4 | Apr 13 | Auth. (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Silkalns Activello theme <= 1.4.4 versions |
| CVE-2022-1945 | CS Coming Soon & Maintenance Mode Colorlib | 4.8 | Jun 20 | The Coming Soon & Maintenance Mode by Colorlib WordPress plugin before 1.0.99 does not sanitize and escape some settings, allowing high privilege users such as admin to perform… |
| CVE-2015-1494 | FA Fancybox Colorlib | – | Feb 17 | The FancyBox for WordPress plugin before 3.0.3 for WordPress does not properly restrict access, which allows remote attackers to conduct cross-site scripting (XSS) attacks via an… |