Product by ExtendThemes

    Colibri Page Builder

    20 known vulnerabilities in Colibri Page Builder (ExtendThemes), 0 of them actively exploited (CISA KEV).

    Key figures

    20

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Colibri Page Builder (ExtendThemes)
    HighCVE-2026-107758

    Colibri Page Builder <= 1.0.390 - Unauthenticated Stored Cross-Site Scripting via Comments

    		7.2
    HighCVE-2023-2188

    Colibri Page Builder <= 1.0.227 - Authenticated (Administrator+) SQL Injection via post_id

    		7.2
    MediumCVE-2025-32185

    WordPress Colibri Page Builder plugin <= 1.0.329 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		6.5
    MediumCVE-2024-5020

    ExtendThemes Colibri Page Builder: Cross-site Scripting

    also in 12 other products

    		6.4
    MediumCVE-2025-11747

    ExtendThemes Colibri Page Builder: Cross-site Scripting

    		6.4
    MediumCVE-2024-3337

    ExtendThemes Colibri Page Builder: Cross-site Scripting

    		6.4
    MediumCVE-2025-11376

    Colibri Page Builder <= 1.0.335 - Authenticated (Contributor+) Stored Cross-Site Scripting

    		6.4
    MediumCVE-2025-9560

    ExtendThemes Colibri Page Builder: Cross-site Scripting

    		6.4
    MediumCVE-2024-3340

    ExtendThemes Colibri Page Builder: Cross-site Scripting

    		5.4
    MediumCVE-2023-50833

    WordPress Colibri Page Builder Plugin <= 1.0.239 is vulnerable to Cross Site Scripting (XSS)

    		6.5
    MediumCVE-2023-6988

    ExtendThemes Colibri Page Builder: Cross-site Scripting

    		6.4
    MediumCVE-2024-5038

    ExtendThemes Colibri Page Builder: Cross-site Scripting

    		6.4
    MediumCVE-2025-59593

    WordPress Colibri Page Builder Plugin < 1.0.334 - Cross Site Scripting (XSS) Vulnerability

    also in 1 other product

    		5.9
    MediumCVE-2024-2839

    Colibri Page Builder <= 1.0.263 - Authenticated (Contributor+) Stored Cross-Site Scripting

    		6.4
    MediumCVE-2024-4451

    ExtendThemes Colibri Page Builder: Cross-site Scripting

    		6.4
    MediumCVE-2024-28004

    WordPress Colibri Page Builder plugin <= 1.0.248 - Broken Access Control vulnerability

    		5.4
    MediumCVE-2024-3338

    Colibri Page Builder <= 1.0.262 - Authenticated (Author+) Stored Cross-Site Scripting

    		4.4
    MediumCVE-2024-1870

    Colibri Page Builder <= 1.0.260 - Missing Authorization

    		4.3
    MediumCVE-2024-1362

    Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via cp_shortcode_refresh

    		4.3
    MediumCVE-2024-1361

    Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via extend_builder

    		4.3

    All products by ExtendThemes