Colibri Page Builder

Extend Themes

Developer

1.0.360

Latest version

90,000

Installations

No date

Last updated

WordPress Plugin

No VDP

Claim ownership

Report vulnerability

Vulnerabilities

Security Contributors

Vulnerability history

0 present

19 patched

2 Mitigation rules

Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri_breadcrumb_element' Shortcode vulnerability
<= 1.0.272
02/02/2026
Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_video_player Shortcode vulnerability
<= 1.0.276
02/02/2026
Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability
<= 1.0.345
18/12/2025
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
<= 1.0.335
12/12/2025
Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_newsletter Shortcode vulnerability
<= 1.0.334
13/10/2025
Cross Site Scripting (XSS) Vulnerability
< 1.0.334
22/09/2025
Cross Site Scripting (XSS) vulnerability
<= 1.0.329
04/04/2025
Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library
<= 1.0.286
03/12/2024
Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability
<= 1.0.276
06/06/2024
Authenticated (Author+) Stored Cross-Site Scripting vulnerability
<= 1.0.262
23/04/2024
Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri-gallery-slideshow' Shortcode vulnerability
<= 1.0.272
23/04/2024
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
<= 1.0.263
02/04/2024
Broken Access Control vulnerability
<= 1.0.248
26/03/2024
Missing Authorization vulnerability
<= 1.0.260
11/03/2024
Cross-Site Request Fogery via cp_shortcode_refresh vulnerability
<= 1.0.253
23/02/2024
Cross-Site Request Fogery via extend_builder vulnerability
<= 1.0.253
23/02/2024
Auth. Stored Cross-Site Scripting vulnerability
<= 1.0.239
27/12/2023
Cross Site Scripting (XSS) vulnerability
<= 1.0.246
19/12/2023
Auth. SQL Injection (SQLi) vulnerability
<= 1.0.227
22/06/2023