Browse CVEs

HIGH 8.8 CVE-2025-62751 Missing Authorization vulnerability in extendthemes Vireo vireo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… Vireo after 1.0.24 Fix from $1,9502025-12-31 MEDIUM 5.9 CVE-2025-59593 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Colibri Page Builder colibri-page… Colibri Page Builder 1.0.334+ Fix from $1,6002025-10-22 MEDIUM 5.4 CVE-2025-32185 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Colibri Page Builder colibri-page… Colibri Page Builder 1.0.332+ Fix from $1,6002025-04-04 MEDIUM 6.5 CVE-2023-3204 The Materialis theme for WordPress is vulnerable to limited arbitrary options updates in versions up to, and including, 1.1.24. This is due to missin… Materialis 1.1.30+ Fix from $1,6002024-06-20 MEDIUM 5.4 CVE-2024-4451 The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's colibri_video_player shortcode in all ver… Colibri Page Builder 1.0.277+ Fix from $1,6002024-06-07 MEDIUM 5.4 CVE-2024-5038 The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and i… Colibri Page Builder 1.0.277+ Fix from $1,6002024-06-06 MEDIUM 5.4 CVE-2024-4707 The Materialis Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's materialis_contact_form shortcode in all … Materialis Companion 1.3.42+ Fix from $1,6002024-06-06 MEDIUM 5.4 CVE-2024-3338 The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image alt data parameter in all versions up to, and in… Colibri Page Builder 1.0.274+ Fix from $1,6002024-05-02 MEDIUM 5.4 CVE-2024-3340 The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'colibri-gallery-slideshow' shortcode in … Colibri Page Builder 1.0.274+ Fix from $1,6002024-05-02 MEDIUM 5.4 CVE-2024-3337 The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'colibri_breadcrumb_element' shortcode in… Colibri Page Builder 1.0.274+ Fix from $1,6002024-05-02 HIGH 8.8 CVE-2024-33688 Cross-Site Request Forgery (CSRF) vulnerability in Extend Themes Teluro.This issue affects Teluro: from n/a through 1.0.31. Teluro 1.0.36+ Fix from $1,9502024-04-26 MEDIUM 5.4 CVE-2024-2839 The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'colibri_post_title' shortcode in all ver… Colibri Page Builder 1.0.270+ Fix from $1,6002024-04-02 HIGH 8.8 CVE-2024-2904 Cross-Site Request Forgery (CSRF) vulnerability in Extend Themes Calliope.This issue affects Calliope: from n/a through 1.0.33. Calliope 1.0.35+ Fix from $1,9502024-03-26 MEDIUM 5.4 CVE-2023-6988 The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's extend_builder_render_js shortcode in all… Colibri Page Builder after 1.0.239 Fix from $1,6002024-01-11 MEDIUM 5.4 CVE-2023-50833 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExtendThemes Colibri Page Builder allows Stored… Colibri Page Builder after 1.0.239 Fix from $1,6002023-12-21 HIGH 8.8 CVE-2019-25142 The Mesmerize & Materialis themes for WordPress are vulnerable to authenticated options change in versions up to, and including,1.6.89 (Mesmerize) an… Materialis 1.0.173 / 1.6.90+ Fix from $1,9502023-06-07 MEDIUM 5.4 CVE-2022-4762 The Materialis Companion WordPress plugin before 1.3.40 does not validate and escape some of its shortcode attributes before outputting them back in … Materialis Companion 1.3.40+ Fix from $1,6002023-02-06 MEDIUM 5.4 CVE-2022-4481 The Mesmerize Companion WordPress plugin before 1.6.135 does not validate and escape some of its shortcode attributes before outputting them back in … Mesmerize Companion 1.6.135+ Fix from $1,6002023-01-16