Login Request a demo
EX
Vendor
extendthemes
12 products with CVEs on record
41
CVEs
0
On KEV
3
New 30D
Products
KA
Kubio AI Page Builder
extendthemes
9.8
8 CVEs0 on KEV1 new
CP
Colibri Page Builder
extendthemes
7.2
20 CVEs0 on KEV1 new
IH
Image Hub – Free Images from Unsplash, Pixabay, Pexels, Openverse & Giphy
extendthemes
4.3
1 CVEs0 on KEV1 new
MA
Materialis
extendthemes
8.8
2 CVEs0 on KEV0 new
MC
Materialis Companion
Extendthemes
5.4
2 CVEs0 on KEV0 new
ME
Mesmerize
extendthemes
8.8
2 CVEs0 on KEV0 new
CA
Calliope
Extendthemes
8.8
1 CVEs0 on KEV0 new
EM
Empowerwp
Extendthemes
4.3
1 CVEs0 on KEV0 new
HI
Highlight
extendthemes
4.3
1 CVEs0 on KEV0 new
MC
Mesmerize Companion
Extendthemes
5.4
1 CVEs0 on KEV0 new
TE
Teluro
Extendthemes
8.8
1 CVEs0 on KEV0 new
VI
Vireo
extendthemes
8.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-109191
IH
Image Hub – Free Images from Unsplash, Pixabay, Pexels, Openverse & Giphy
extendthemes
4.3
0%
Oct 16Image Hub <= 1.2.0 - Authenticated (Subscriber+) Sensitive Information Exposure in Admin Page HTML
CVE-2026-107758
CP
Colibri Page Builder
extendthemes
7.2
0%
Oct 16Colibri Page Builder <= 1.0.390 - Unauthenticated Stored Cross-Site Scripting via Comments
CVE-2026-100107
KA
Kubio AI Page Builder
extendthemes
7.2
0%
Oct 2Kubio AI Page Builder <= 2.9.2 - Unauthenticated Stored Cross-Site Scripting via SVG Comment Content (KSES Allowlist Bypass)
CVE-2026-14472
KA
Kubio AI Page Builder
extendthemes
6.4
0%
Sep 18Kubio AI Page Builder <= 2.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via kubio/copyright Block Content
CVE-2026-16779
KA
Kubio AI Page Builder
extendthemes
4.3
0%
Aug 16Kubio AI Page Builder <= 2.8.5 - Missing Authorization to Authenticated (Contributor+) Front-Page/Menu/Template Configuration Reversion via kubio_restore_front_page AJAX Action
CVE-2026-5427
KA
Kubio AI Page Builder
extendthemes
5.3
1%
Apr 17Kubio AI Page Builder <= 2.7.2 - Missing Authorization to Authenticated (Contributor+) Limited File Upload via Kubio Block Attributes
CVE-2025-62751
VI
Vireo
extendthemes
8.8
0%
Dec 31WordPress Vireo theme <= 1.0.24 - Broken Access Control vulnerability
CVE-2025-11747
CP
Colibri Page Builder
extendthemes
6.4
0%
Dec 19Colibri Page Builder <= 1.0.345 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2025-11376
CP
Colibri Page Builder
extendthemes
6.4
0%
Dec 13Colibri Page Builder <= 1.0.335 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-59593
CP
Colibri Page Builder
Extendthemes
5.9
0%
Oct 22WordPress Colibri Page Builder Plugin < 1.0.334 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-9560
CP
Colibri Page Builder
extendthemes
6.4
0%
Oct 11Colibri Page Builder <= 1.0.334 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_newsletter Shortcode
CVE-2025-8487
KA
Kubio AI Page Builder
extendthemes
5.4
0%
Sep 19Kubio AI Page Builder <= 2.6.3 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation
CVE-2025-32185
CP
Colibri Page Builder
Extendthemes
5.4
0%
Apr 4WordPress Colibri Page Builder plugin <= 1.0.329 - Cross Site Scripting (XSS) vulnerability
CVE-2025-2294
KA
Kubio AI Page Builder
extendthemes
9.8
78%
Mar 28Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion
CVE-2024-13516
KA
Kubio AI Page Builder
extendthemes
6.1
0%
Jan 18Kubio AI Page Builder <= 2.3.5 - Reflected Cross-Site Scripting
CVE-2024-37458
HI
Highlight
extendthemes
4.3
0%
Jan 2WordPress Highlight theme <= 1.0.29 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-37431
ME
Mesmerize
extendthemes
4.3
0%
Jan 2WordPress Mesmerize theme <= 1.6.120 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-5020
CP
Colibri Page Builder
extendthemes
6.4
0%
Dec 4Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library
CVE-2024-39661
KA
Kubio AI Page Builder
ExtendThemes
6.5
0%
Aug 1WordPress Kubio AI Page Builder plugin <= 2.2.4 - Authenticated Cross Site Scripting (XSS) vulnerability
CVE-2023-3204
MA
Materialis
extendthemes
6.5
0%
Jun 20Materialis <= 1.1.24 - Missing Authorization to Limited Arbitrary Options Update
CVE-2024-4451
CP
Colibri Page Builder
extendthemes
5.4
0%
Jun 7Colibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_video_player Shortcode
CVE-2024-5038
CP
Colibri Page Builder
extendthemes
5.4
0%
Jun 6Colibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-4707
MC
Materialis Companion
Extendthemes
5.4
0%
Jun 6Materialis Companion <= 1.3.41 - Authenticated (Contributor+) Store Cross-Site Scripting via materialis_contact_form Shortcode
CVE-2024-34809
EM
Empowerwp
Extendthemes
4.3
0%
May 17WordPress EmpowerWP theme <= 1.0.21 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-3340
CP
Colibri Page Builder
extendthemes
5.4
0%
May 2Colibri Page Builder <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri-gallery-slideshow' Shortcode
CVE-2024-3337
CP
Colibri Page Builder
extendthemes
5.4
0%
May 2Colibri Page Builder <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri_breadcrumb_element' Shortcode
CVE-2024-3338
CP
Colibri Page Builder
extendthemes
5.4
0%
May 2Colibri Page Builder <= 1.0.262 - Authenticated (Author+) Stored Cross-Site Scripting
CVE-2024-33688
TE
Teluro
Extendthemes
8.8
0%
Apr 26WordPress Teluro theme <= 1.0.31 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-2839
CP
Colibri Page Builder
extendthemes
5.4
0%
Apr 2Colibri Page Builder <= 1.0.263 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-28004
CP
Colibri Page Builder
ExtendThemes
4.3
0%
Mar 28WordPress Colibri Page Builder plugin <= 1.0.248 - Broken Access Control vulnerability
CVE-2024-2904
CA
Calliope
Extendthemes
8.8
0%
Mar 26Cross-Site Request Forgery (CSRF) vulnerability in Extend Themes Calliope.This issue affects Calliope: from n/a through 1.0.33
CVE-2024-1870
CP
Colibri Page Builder
Extendthemes
4.3
0%
Mar 9The Colibri Page Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the callActivateLicenseEndpoint function in…
CVE-2024-1362
CP
Colibri Page Builder
Extendthemes
4.3
0%
Feb 23The Colibri Page Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.253
CVE-2024-1361
CP
Colibri Page Builder
Extendthemes
4.3
0%
Feb 23The Colibri Page Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.253
CVE-2023-6988
CP
Colibri Page Builder
Extendthemes
5.4
0%
Jan 11The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's extend_builder_render_js shortcode in all versions up to, and…
CVE-2023-50833
CP
Colibri Page Builder
Extendthemes
5.4
0%
Dec 21Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExtendThemes Colibri Page Builder allows Stored XSS.This issue affects…
CVE-2023-2188
CP
Colibri Page Builder
Extendthemes
4.9
1%
Aug 31The Colibri Page Builder for WordPress is vulnerable to SQL Injection via the ‘post_id’ parameter in versions up to, and including, 1.0.227 due to insufficient escaping on the…
CVE-2019-25142
MA
Materialis
Extendthemes
8.8
1%
Jun 7The Mesmerize & Materialis themes for WordPress are vulnerable to authenticated options change in versions up to, and including,1.6.89 (Mesmerize) and 1.0.172 (Materialis)
CVE-2022-4762
MC
Materialis Companion
Extendthemes
5.4
1%
Feb 6The Materialis Companion WordPress plugin before 1.3.40 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow…
CVE-2022-4481
MC
Mesmerize Companion
Extendthemes
5.4
1%
Jan 16The Mesmerize Companion WordPress plugin before 1.6.135 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow…