Vulnerability index

Browse CVEs

18 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Vireo HIGH 8.8
CVE-2025-62751

Missing Authorization vulnerability in extendthemes Vireo vireo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af…

Fix: after 1.0.24
Fix from $1,950 2025-12-31
Colibri Page Builder MEDIUM 5.9
CVE-2025-59593

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Colibri Page Builder colibri-page…

Fix: 1.0.334+
Fix from $1,600 2025-10-22
Colibri Page Builder MEDIUM 5.4
CVE-2025-32185

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Colibri Page Builder colibri-page…

Fix: 1.0.332+
Fix from $1,600 2025-04-04
Materialis MEDIUM 6.5
CVE-2023-3204

The Materialis theme for WordPress is vulnerable to limited arbitrary options updates in versions up to, and including, 1.1.24. This is due to missin…

Fix: 1.1.30+
Fix from $1,600 2024-06-20
Colibri Page Builder MEDIUM 5.4
CVE-2024-4451

The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's colibri_video_player shortcode in all ver…

Fix: 1.0.277+
Fix from $1,600 2024-06-07
Colibri Page Builder MEDIUM 5.4
CVE-2024-5038

The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and i…

Fix: 1.0.277+
Fix from $1,600 2024-06-06
Materialis Companion MEDIUM 5.4
CVE-2024-4707

The Materialis Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's materialis_contact_form shortcode in all …

Fix: 1.3.42+
Fix from $1,600 2024-06-06
Colibri Page Builder MEDIUM 5.4
CVE-2024-3338

The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image alt data parameter in all versions up to, and in…

Fix: 1.0.274+
Fix from $1,600 2024-05-02
Colibri Page Builder MEDIUM 5.4
CVE-2024-3340

The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'colibri-gallery-slideshow' shortcode in …

Fix: 1.0.274+
Fix from $1,600 2024-05-02
Colibri Page Builder MEDIUM 5.4
CVE-2024-3337

The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'colibri_breadcrumb_element' shortcode in…

Fix: 1.0.274+
Fix from $1,600 2024-05-02
Teluro HIGH 8.8
CVE-2024-33688

Cross-Site Request Forgery (CSRF) vulnerability in Extend Themes Teluro.This issue affects Teluro: from n/a through 1.0.31.

Fix: 1.0.36+
Fix from $1,950 2024-04-26
Colibri Page Builder MEDIUM 5.4
CVE-2024-2839

The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'colibri_post_title' shortcode in all ver…

Fix: 1.0.270+
Fix from $1,600 2024-04-02
Calliope HIGH 8.8
CVE-2024-2904

Cross-Site Request Forgery (CSRF) vulnerability in Extend Themes Calliope.This issue affects Calliope: from n/a through 1.0.33.

Fix: 1.0.35+
Fix from $1,950 2024-03-26
Colibri Page Builder MEDIUM 5.4
CVE-2023-6988

The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's extend_builder_render_js shortcode in all…

Fix: after 1.0.239
Fix from $1,600 2024-01-11
Colibri Page Builder MEDIUM 5.4
CVE-2023-50833

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExtendThemes Colibri Page Builder allows Stored…

Fix: after 1.0.239
Fix from $1,600 2023-12-21
Materialis HIGH 8.8
CVE-2019-25142

The Mesmerize & Materialis themes for WordPress are vulnerable to authenticated options change in versions up to, and including,1.6.89 (Mesmerize) an…

Fix: 1.0.173 / 1.6.90+
Fix from $1,950 2023-06-07
Materialis Companion MEDIUM 5.4
CVE-2022-4762

The Materialis Companion WordPress plugin before 1.3.40 does not validate and escape some of its shortcode attributes before outputting them back in …

Fix: 1.3.40+
Fix from $1,600 2023-02-06
Mesmerize Companion MEDIUM 5.4
CVE-2022-4481

The Mesmerize Companion WordPress plugin before 1.6.135 does not validate and escape some of its shortcode attributes before outputting them back in …

Fix: 1.6.135+
Fix from $1,600 2023-01-16