Colibri Page Builder

37 known CVEs 90K+ active installs

Scan My Site Free
UNKNOWN: 37
Known Vulnerabilities 37
CVE-2025-11747 UNKNOWN EPSS 0.2%
Published 2025-12-19 · Affected: *
The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the colibri_blog_posts shortcode in all versions up to, and including, 1.0.345 due to insufficient input
CVE-2025-11376 UNKNOWN EPSS 0.1%
Published 2025-12-13 · Affected: *
The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'colibri_loop' shortcode in all versions up to, and including, 1.0.335 due to insufficient i
CVE-2025-59593 UNKNOWN EPSS 0.1%
Published 2025-10-22 · Affected: *
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Colibri Page Builder colibri-page-builder allows Stored XSS.This issue affects Colib
CVE-2025-59593 UNKNOWN EPSS 0.1%
Published 2025-10-22 · Affected: *
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Colibri Page Builder colibri-page-builder allows Stored XSS.This issue affects Colib
CVE-2025-59593 UNKNOWN EPSS 0.1%
Published 2025-10-22 · Affected: *
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Colibri Page Builder colibri-page-builder allows Stored XSS.This issue affects Colib
CVE-2025-59593 UNKNOWN EPSS 0.1%
Published 2025-10-22 · Affected: *
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Colibri Page Builder colibri-page-builder allows Stored XSS.This issue affects Colib
CVE-2025-59593 UNKNOWN EPSS 0.1%
Published 2025-10-22 · Affected: *
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Colibri Page Builder colibri-page-builder allows Stored XSS.This issue affects Colib
CVE-2025-9560 UNKNOWN EPSS 0.1%
Published 2025-10-11 · Affected: *
The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's colibri_newsletter shortcode in all versions up to, and including, 1.0.334 due to insufficie
CVE-2025-32185 UNKNOWN EPSS 0.3%
Published 2025-04-04 · Affected: *
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Colibri Page Builder colibri-page-builder allows Stored XSS.This issue affects Colib
CVE-2025-32185 UNKNOWN EPSS 0.3%
Published 2025-04-04 · Affected: *
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Colibri Page Builder colibri-page-builder allows Stored XSS.This issue affects Colib
CVE-2025-32185 UNKNOWN EPSS 0.3%
Published 2025-04-04 · Affected: *
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Colibri Page Builder colibri-page-builder allows Stored XSS.This issue affects Colib
CVE-2025-32185 UNKNOWN EPSS 0.3%
Published 2025-04-04 · Affected: *
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Colibri Page Builder colibri-page-builder allows Stored XSS.This issue affects Colib
CVE-2025-32185 UNKNOWN EPSS 0.3%
Published 2025-04-04 · Affected: *
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Colibri Page Builder colibri-page-builder allows Stored XSS.This issue affects Colib
CVE-2025-32185 UNKNOWN EPSS 0.3%
Published 2025-04-04 · Affected: *
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Colibri Page Builder colibri-page-builder allows Stored XSS.This issue affects Colib
CVE-2025-32185 UNKNOWN EPSS 0.3%
Published 2025-04-04 · Affected: *
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Colibri Page Builder colibri-page-builder allows Stored XSS.This issue affects Colib
CVE-2024-4451 UNKNOWN EPSS 0.2%
Published 2024-06-07 · Affected: *
The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's colibri_video_player shortcode in all versions up to, and including, 1.0.276 due to insuffic
CVE-2024-4451 UNKNOWN EPSS 0.2%
Published 2024-06-07 · Affected: *
The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's colibri_video_player shortcode in all versions up to, and including, 1.0.276 due to insuffic
CVE-2024-5038 UNKNOWN EPSS 0.2%
Published 2024-06-06 · Affected: *
The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 1.0.276 due to insufficient input sanitiz
CVE-2024-5038 UNKNOWN EPSS 0.2%
Published 2024-06-06 · Affected: *
The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 1.0.276 due to insufficient input sanitiz
CVE-2024-3340 UNKNOWN EPSS 0.4%
Published 2024-05-02 · Affected: *
The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'colibri-gallery-slideshow' shortcode in all versions up to, and including, 1.0.272 due to i
CVE-2024-3340 UNKNOWN EPSS 0.4%
Published 2024-05-02 · Affected: *
The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'colibri-gallery-slideshow' shortcode in all versions up to, and including, 1.0.272 due to i
CVE-2024-3338 UNKNOWN EPSS 0.4%
Published 2024-05-02 · Affected: *
The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image alt data parameter in all versions up to, and including, 1.0.262 due to insufficient input sanitiza
CVE-2024-3338 UNKNOWN EPSS 0.4%
Published 2024-05-02 · Affected: *
The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image alt data parameter in all versions up to, and including, 1.0.262 due to insufficient input sanitiza
CVE-2024-3337 UNKNOWN EPSS 0.4%
Published 2024-05-02 · Affected: *
The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'colibri_breadcrumb_element' shortcode in all versions up to, and including, 1.0.272 due to
CVE-2024-3337 UNKNOWN EPSS 0.4%
Published 2024-05-02 · Affected: *
The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'colibri_breadcrumb_element' shortcode in all versions up to, and including, 1.0.272 due to
CVE-2024-2839 UNKNOWN EPSS 0.2%
Published 2024-04-02 · Affected: *
The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'colibri_post_title' shortcode in all versions up to, and including, 1.0.263 due to insuffic
CVE-2024-2839 UNKNOWN EPSS 0.2%
Published 2024-04-02 · Affected: *
The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'colibri_post_title' shortcode in all versions up to, and including, 1.0.263 due to insuffic
CVE-2024-1870 UNKNOWN EPSS 0.3%
Published 2024-03-09 · Affected: *
The Colibri Page Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the callActivateLicenseEndpoint function in all versions up to, an
CVE-2024-1870 UNKNOWN EPSS 0.3%
Published 2024-03-09 · Affected: *
The Colibri Page Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the callActivateLicenseEndpoint function in all versions up to, an
CVE-2024-1362 UNKNOWN EPSS 0.1%
Published 2024-02-23 · Affected: *
The Colibri Page Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.253. This is due to missing or incorrect nonce validation on the cp_
CVE-2024-1362 UNKNOWN EPSS 0.1%
Published 2024-02-23 · Affected: *
The Colibri Page Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.253. This is due to missing or incorrect nonce validation on the cp_
CVE-2024-1361 UNKNOWN EPSS 0.1%
Published 2024-02-23 · Affected: *
The Colibri Page Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.253. This is due to missing or incorrect nonce validation on the api
CVE-2024-1361 UNKNOWN EPSS 0.1%
Published 2024-02-23 · Affected: *
The Colibri Page Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.253. This is due to missing or incorrect nonce validation on the api
CVE-2023-6988 UNKNOWN EPSS 0.3%
Published 2024-01-11 · Affected: *
The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's extend_builder_render_js shortcode in all versions up to, and including, 1.0.239 due to insu
CVE-2023-6988 UNKNOWN EPSS 0.3%
Published 2024-01-11 · Affected: *
The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's extend_builder_render_js shortcode in all versions up to, and including, 1.0.239 due to insu
CVE-2023-2188 UNKNOWN EPSS 0.6%
Published 2023-08-31 · Affected: *
The Colibri Page Builder for WordPress is vulnerable to SQL Injection via the ‘post_id’ parameter in versions up to, and including, 1.0.227 due to insufficient escaping on the user supplied parameter
CVE-2023-2188 UNKNOWN EPSS 0.6%
Published 2023-08-31 · Affected: *
The Colibri Page Builder for WordPress is vulnerable to SQL Injection via the ‘post_id’ parameter in versions up to, and including, 1.0.227 due to insufficient escaping on the user supplied parameter

Is Colibri Page Builder running on your site?

A free scan detects your plugins and flags any that match these CVEs.

Scan My Site Free