| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2024-1870 | Colibri Page Builder <= 1.0.260 - Missing Authorization | extendthemes | Colibri Page Builder | Medium | 4.3 | 2024-03-09 09:37:47 | Deep Dive |
| CVE-2024-1360 | Colibri WP <= 1.0.94 - Cross-Site Request Forgery to Limited Plugin Installation | extendthemes | Colibri WP | Medium | 4.3 | 2024-02-23 11:03:47 | Deep Dive |
| CVE-2024-1362 | Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via cp_shortcode_refresh | extendthemes | Colibri Page Builder | Medium | 4.3 | 2024-02-23 11:03:46 | Deep Dive |
| CVE-2024-1361 | Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via extend_builder | extendthemes | Colibri Page Builder | Medium | 4.3 | 2024-02-23 11:03:46 | Deep Dive |
| CVE-2023-6988 | Colibri Page Builder <= 1.0.239 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode | extendthemes | Colibri Page Builder | Medium | 6.4 | 2024-01-11 08:32:31 | Deep Dive |
| CVE-2023-50833 | WordPress Colibri Page Builder Plugin <= 1.0.239 is vulnerable to Cross Site Scripting (XSS) | ExtendThemes | Colibri Page Builder | Medium | 6.5 | 2023-12-21 17:53:56 | Deep Dive |
| CVE-2023-2188 | Colibri Page Builder <= 1.0.227 - Authenticated (Administrator+) SQL Injection via post_id | extendthemes | Colibri Page Builder | High | 7.2 | 2023-08-31 05:33:13 | Deep Dive |
| CVE-2019-25142 | Mesmerize <= 1.6.89 & Materialis <= 1.0.172 - Authenticated Arbitrary Options Update | extendthemes | Materialis | High | 8.8 | 2023-06-07 01:51:30 | Deep Dive |