CO
Vendor
Colorlib
21
CVEs
0
On KEV
0
New 30D
Products
AC9.8
Activello
Colorlib
3 CVEs0 on KEV0 new
FA6.1
Fancybox
Colorlib
3 CVEs0 on KEV0 new
BO9.8
Bonkers
Colorlib
2 CVEs0 on KEV0 new
CS5.3
Coming Soon & Maintenance Mode
Colorlib
2 CVEs0 on KEV0 new
IL9.8
Illdy
Colorlib
2 CVEs0 on KEV0 new
NX9.8
Newspaper X
Colorlib
2 CVEs0 on KEV0 new
PL9.8
Pixova Lite
Colorlib
2 CVEs0 on KEV0 new
SH9.8
Shapely
Colorlib
2 CVEs0 on KEV0 new
AT5.4
Activello Theme
Colorlib
1 CVEs0 on KEV0 new
SC4.3
Simple Custom Post Order
Colorlib
1 CVEs0 on KEV0 new
SP9.8
Sparklinkg
Colorlib
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-3662 | FA Fancybox Colorlib | 6.1 | Jun 3 | FancyBox for WordPress < 3.3.6 - Unauthenticated Stored XSS |
| CVE-2024-49321 | SC Simple Custom Post Order Colorlib | 4.3 | Oct 21 | WordPress Simple Custom Post Order plugin <= 2.5.7 - Broken Access Control vulnerability |
| CVE-2024-0662 | FA Fancybox Colorlib | 4.8 | Apr 9 | The FancyBox for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions 3.0.2 to 3.3.3 due to insufficient input sanitization… |
| CVE-2024-1473 | CS Coming Soon & Maintenance Mode Colorlib | 5.3 | Mar 20 | Coming Soon & Maintenance Mode by Colorlib <= 1.0.99 - Information Exposure |
| CVE-2020-36721 | IL Illdy Colorlib | 6.5 | Jun 7 | Epsilon Framework Themes (Various Versions) - Unauthenticated Plugin Activation/Deactivation |
| CVE-2020-36708 | NX Newspaper X Colorlib | 9.8 | Jun 7 | Epsilon Framework Themes (Various Versions) - Function Injection |
| CVE-2022-45849 | AT Activello Theme Colorlib | 5.4 | Apr 16 | WordPress Activello Theme <= 1.4.4 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2022-45358 | AC Activello Colorlib | 5.4 | Apr 13 | WordPress Activello Theme <= 1.4.4 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2022-1945 | CS Coming Soon & Maintenance Mode Colorlib | 4.8 | Jun 20 | Coming Soon and Maintenance by Colorlib < 1.0.99 - Admin+ Stored Cross Site Scripting |
| CVE-2015-1494 | FA Fancybox Colorlib | – | Feb 17 | The FancyBox for WordPress plugin before 3.0.3 for WordPress does not properly restrict access, which allows remote attackers to conduct cross-site scripting (XSS) attacks via an… |