Login Request a demo
EX
Vendor
extendthemes
13 products with CVEs on record
42
CVEs
0
On KEV
3
New 30D
Products
KA
Kubio AI Page Builder
extendthemes
9.8
8 CVEs0 on KEV1 new
CP
Colibri Page Builder
extendthemes
7.2
20 CVEs0 on KEV1 new
IH
Image Hub – Free Images from Unsplash, Pixabay, Pexels, Openverse & Giphy
extendthemes
4.3
1 CVEs0 on KEV1 new
MA
Materialis
extendthemes
8.8
2 CVEs0 on KEV0 new
MC
Materialis Companion
Extendthemes
5.4
2 CVEs0 on KEV0 new
ME
Mesmerize
extendthemes
8.8
2 CVEs0 on KEV0 new
CA
Calliope
Extendthemes
8.8
1 CVEs0 on KEV0 new
CW
Colibri WP
extendthemes
4.3
1 CVEs0 on KEV0 new
EM
Empowerwp
Extendthemes
4.3
1 CVEs0 on KEV0 new
HI
Highlight
extendthemes
4.3
1 CVEs0 on KEV0 new
MC
Mesmerize Companion
Extendthemes
5.4
1 CVEs0 on KEV0 new
TE
Teluro
Extendthemes
8.8
1 CVEs0 on KEV0 new
VI
Vireo
extendthemes
8.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-109191
IH
Image Hub – Free Images from Unsplash, Pixabay, Pexels, Openverse & Giphy
extendthemes
4.3
0%
Oct 16Image Hub <= 1.2.0 - Authenticated (Subscriber+) Sensitive Information Exposure in Admin Page HTML
CVE-2026-107758
CP
Colibri Page Builder
extendthemes
7.2
0%
Oct 16Colibri Page Builder <= 1.0.390 - Unauthenticated Stored Cross-Site Scripting via Comments
CVE-2026-100107
KA
Kubio AI Page Builder
extendthemes
7.2
0%
Oct 2Kubio AI Page Builder <= 2.9.2 - Unauthenticated Stored Cross-Site Scripting via SVG Comment Content (KSES Allowlist Bypass)
CVE-2026-14472
KA
Kubio AI Page Builder
extendthemes
6.4
0%
Sep 18Kubio AI Page Builder <= 2.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via kubio/copyright Block Content
CVE-2026-16779
KA
Kubio AI Page Builder
extendthemes
4.3
0%
Aug 16Kubio AI Page Builder <= 2.8.5 - Missing Authorization to Authenticated (Contributor+) Front-Page/Menu/Template Configuration Reversion via kubio_restore_front_page AJAX Action
CVE-2026-5427
KA
Kubio AI Page Builder
extendthemes
5.3
1%
Apr 17Kubio AI Page Builder <= 2.7.2 - Missing Authorization to Authenticated (Contributor+) Limited File Upload via Kubio Block Attributes
CVE-2025-62751
VI
Vireo
extendthemes
8.8
0%
Dec 31WordPress Vireo theme <= 1.0.24 - Broken Access Control vulnerability
CVE-2025-11747
CP
Colibri Page Builder
extendthemes
6.4
0%
Dec 19Colibri Page Builder <= 1.0.345 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2025-11376
CP
Colibri Page Builder
extendthemes
6.4
0%
Dec 13Colibri Page Builder <= 1.0.335 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-59593
CP
Colibri Page Builder
Extendthemes
5.9
0%
Oct 22WordPress Colibri Page Builder Plugin < 1.0.334 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-9560
CP
Colibri Page Builder
extendthemes
6.4
0%
Oct 11Colibri Page Builder <= 1.0.334 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_newsletter Shortcode
CVE-2025-8487
KA
Kubio AI Page Builder
extendthemes
5.4
0%
Sep 19Kubio AI Page Builder <= 2.6.3 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation
CVE-2025-32185
CP
Colibri Page Builder
Extendthemes
5.4
0%
Apr 4WordPress Colibri Page Builder plugin <= 1.0.329 - Cross Site Scripting (XSS) vulnerability
CVE-2025-2294
KA
Kubio AI Page Builder
extendthemes
9.8
78%
Mar 28Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion
CVE-2024-13516
KA
Kubio AI Page Builder
extendthemes
6.1
0%
Jan 18Kubio AI Page Builder <= 2.3.5 - Reflected Cross-Site Scripting
CVE-2024-37458
HI
Highlight
extendthemes
4.3
0%
Jan 2WordPress Highlight theme <= 1.0.29 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-37431
ME
Mesmerize
extendthemes
4.3
0%
Jan 2WordPress Mesmerize theme <= 1.6.120 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-5020
CP
Colibri Page Builder
extendthemes
6.4
0%
Dec 4Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library
CVE-2024-39661
KA
Kubio AI Page Builder
ExtendThemes
6.5
0%
Aug 1WordPress Kubio AI Page Builder plugin <= 2.2.4 - Authenticated Cross Site Scripting (XSS) vulnerability
CVE-2023-3204
MA
Materialis
extendthemes
6.5
0%
Jun 20Materialis <= 1.1.24 - Missing Authorization to Limited Arbitrary Options Update
CVE-2024-4451
CP
Colibri Page Builder
extendthemes
5.4
0%
Jun 7Colibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_video_player Shortcode
CVE-2024-5038
CP
Colibri Page Builder
extendthemes
5.4
0%
Jun 6Colibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-4707
MC
Materialis Companion
Extendthemes
5.4
0%
Jun 6Materialis Companion <= 1.3.41 - Authenticated (Contributor+) Store Cross-Site Scripting via materialis_contact_form Shortcode
CVE-2024-34809
EM
Empowerwp
Extendthemes
4.3
0%
May 17WordPress EmpowerWP theme <= 1.0.21 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-3340
CP
Colibri Page Builder
extendthemes
5.4
0%
May 2Colibri Page Builder <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri-gallery-slideshow' Shortcode
CVE-2024-3337
CP
Colibri Page Builder
extendthemes
5.4
0%
May 2Colibri Page Builder <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri_breadcrumb_element' Shortcode
CVE-2024-3338
CP
Colibri Page Builder
extendthemes
5.4
0%
May 2Colibri Page Builder <= 1.0.262 - Authenticated (Author+) Stored Cross-Site Scripting
CVE-2024-33688
TE
Teluro
Extendthemes
8.8
0%
Apr 26WordPress Teluro theme <= 1.0.31 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-2839
CP
Colibri Page Builder
extendthemes
5.4
0%
Apr 2Colibri Page Builder <= 1.0.263 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-28004
CP
Colibri Page Builder
ExtendThemes
4.3
0%
Mar 28WordPress Colibri Page Builder plugin <= 1.0.248 - Broken Access Control vulnerability
CVE-2024-2904
CA
Calliope
Extendthemes
8.8
0%
Mar 26WordPress Calliope theme <= 1.0.33 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-1870
CP
Colibri Page Builder
extendthemes
4.3
0%
Mar 9Colibri Page Builder <= 1.0.260 - Missing Authorization
CVE-2024-1360
CW
Colibri WP
extendthemes
4.3
0%
Feb 23Colibri WP <= 1.0.94 - Cross-Site Request Forgery to Limited Plugin Installation
CVE-2024-1362
CP
Colibri Page Builder
extendthemes
4.3
0%
Feb 23Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via cp_shortcode_refresh
CVE-2024-1361
CP
Colibri Page Builder
extendthemes
4.3
0%
Feb 23Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via extend_builder
CVE-2023-6988
CP
Colibri Page Builder
extendthemes
5.4
0%
Jan 11Colibri Page Builder <= 1.0.239 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-50833
CP
Colibri Page Builder
ExtendThemes
5.4
0%
Dec 21WordPress Colibri Page Builder Plugin <= 1.0.239 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-2188
CP
Colibri Page Builder
extendthemes
4.9
1%
Aug 31Colibri Page Builder <= 1.0.227 - Authenticated (Administrator+) SQL Injection via post_id
CVE-2019-25142
ME
Mesmerize
extendthemes
8.8
1%
Jun 7Mesmerize <= 1.6.89 & Materialis <= 1.0.172 - Authenticated Arbitrary Options Update
CVE-2022-4762
MC
Materialis Companion
Extendthemes
5.4
1%
Feb 6Materialis Companion < 1.3.40 - Contributor+ Stored XSS via Shortcode
CVE-2022-4481
MC
Mesmerize Companion
Extendthemes
5.4
1%
Jan 16Mesmerize Companion < 1.6.135 - Contributor+ Stored XSS