CVE-2026-16779Kubio AI Page Builder <= 2.8.5 - Missing Authorization to Authenticated (Contributor+) Front-Page/Menu/Template Configuration Reversion via kubio_restore_front_page AJAX Action Exploitation status Not known exploited Fix Affected product K Kubio AI Page Builder Published 08/16/2026 Severity Medium CVE-2026-5427Kubio AI Page Builder <= 2.7.2 - Missing Authorization to Authenticated (Contributor+) Limited File Upload via Kubio Block Attributes Exploitation status Not known exploited Fix Affected product K Kubio AI Page Builder Published 04/17/2026 Severity Medium CVE-2025-62751WordPress Vireo theme <= 1.0.24 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product V Vireo Published 12/31/2025 Severity Medium CVE-2025-11747Colibri Page Builder <= 1.0.345 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Exploitation status Not known exploited Fix Affected product C Colibri Page Builder Published 12/19/2025 Severity Medium CVE-2025-11376Colibri Page Builder <= 1.0.335 - Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product C Colibri Page Builder Published 12/13/2025 Severity Medium CVE-2025-59593WordPress Colibri Page Builder Plugin < 1.0.334 - Cross Site Scripting (XSS) Vulnerability Exploitation status Not known exploited Fix Affected product C Colibri Page Builder Published 10/22/2025 Severity Medium CVE-2025-9560Colibri Page Builder <= 1.0.334 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_newsletter Shortcode Exploitation status Not known exploited Fix Affected product C Colibri Page Builder Published 10/11/2025 Severity Medium CVE-2025-8487Kubio AI Page Builder <= 2.6.3 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation Exploitation status Not known exploited Fix Affected product K Kubio AI Page Builder Published 09/19/2025 Severity Medium CVE-2025-32185WordPress Colibri Page Builder plugin <= 1.0.329 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product C Colibri Page Builder Published 04/04/2025 Severity Medium CVE-2025-2294Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion Exploitation status Not known exploited Fix Affected product K Kubio AI Page Builder Published 03/28/2025 Severity Critical CVE-2024-13516Kubio AI Page Builder <= 2.3.5 - Reflected Cross-Site Scripting Exploitation status Not known exploited Fix Affected product K Kubio AI Page Builder Published 01/18/2025 Severity Medium CVE-2024-37458WordPress Highlight theme <= 1.0.29 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix Affected product H Highlight Published 01/02/2025 Severity Medium CVE-2024-37431WordPress Mesmerize theme <= 1.6.120 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix Affected product M Mesmerize Published 01/02/2025 Severity Medium CVE-2024-5020Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library Exploitation status Not known exploited Fix Affected product C Colibri Page Builder Published 12/04/2024 Severity Medium CVE-2024-39661WordPress Kubio AI Page Builder plugin <= 2.2.4 - Authenticated Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product K Kubio AI Page Builder Published 08/01/2024 Severity Medium CVE-2023-3204Materialis <= 1.1.24 - Missing Authorization to Limited Arbitrary Options Update Exploitation status Not known exploited Fix Affected product M Materialis Published 06/20/2024 Severity Medium CVE-2024-4451Colibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_video_player Shortcode Exploitation status Not known exploited Fix Affected product C Colibri Page Builder Published 06/07/2024 Severity Medium CVE-2024-5038Colibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Exploitation status Not known exploited Fix Affected product C Colibri Page Builder Published 06/06/2024 Severity Medium CVE-2024-4707Materialis Companion <= 1.3.41 - Authenticated (Contributor+) Store Cross-Site Scripting via materialis_contact_form Shortcode Exploitation status Not known exploited Fix Affected product M Materialis Companion Published 06/06/2024 Severity Medium CVE-2024-34809WordPress EmpowerWP theme <= 1.0.21 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix Affected product E EmpowerWP Published 05/17/2024 Severity Medium CVE-2024-3340Colibri Page Builder <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri-gallery-slideshow' Shortcode Exploitation status Not known exploited Fix Affected product C Colibri Page Builder Published 05/02/2024 Severity Medium CVE-2024-3337Colibri Page Builder <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri_breadcrumb_element' Shortcode Exploitation status Not known exploited Fix Affected product C Colibri Page Builder Published 05/02/2024 Severity Medium CVE-2024-3338Colibri Page Builder <= 1.0.262 - Authenticated (Author+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product C Colibri Page Builder Published 05/02/2024 Severity Medium CVE-2024-33688WordPress Teluro theme <= 1.0.31 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix Affected product T Teluro Published 04/26/2024 Severity Medium CVE-2024-2839Colibri Page Builder <= 1.0.263 - Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product C Colibri Page Builder Published 04/02/2024 Severity Medium CVE-2024-28004WordPress Colibri Page Builder plugin <= 1.0.248 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product C Colibri Page Builder Published 03/28/2024 Severity Medium CVE-2024-2904WordPress Calliope theme <= 1.0.33 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix Affected product C Calliope Published 03/26/2024 Severity Medium CVE-2024-1870Colibri Page Builder <= 1.0.260 - Missing Authorization Exploitation status Not known exploited Fix Affected product C Colibri Page Builder Published 03/09/2024 Severity Medium CVE-2024-1360Colibri WP <= 1.0.94 - Cross-Site Request Forgery to Limited Plugin Installation Exploitation status Not known exploited Fix Affected product C Colibri WP Published 02/23/2024 Severity Medium CVE-2024-1362Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via cp_shortcode_refresh Exploitation status Not known exploited Fix Affected product C Colibri Page Builder Published 02/23/2024 Severity Medium CVE-2024-1361Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via extend_builder Exploitation status Not known exploited Fix Affected product C Colibri Page Builder Published 02/23/2024 Severity Medium CVE-2023-6988Colibri Page Builder <= 1.0.239 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Exploitation status Not known exploited Fix Affected product C Colibri Page Builder Published 01/11/2024 Severity Medium CVE-2023-50833WordPress Colibri Page Builder Plugin <= 1.0.239 is vulnerable to Cross Site Scripting (XSS) Exploitation status Not confirmed Fix Affected product C Colibri Page Builder Published 12/21/2023 Severity Medium CVE-2023-2188Colibri Page Builder <= 1.0.227 - Authenticated (Administrator+) SQL Injection via post_id Exploitation status Not known exploited Fix Affected product C Colibri Page Builder Published 08/31/2023 Severity High CVE-2019-25142Mesmerize <= 1.6.89 & Materialis <= 1.0.172 - Authenticated Arbitrary Options Update Exploitation status Not known exploited Fix Affected product M Materialis Published 06/07/2023 Severity High CVE-2022-4762Materialis Companion < 1.3.40 - Contributor+ Stored XSS via Shortcode Exploitation status Public exploit Fix Affected product M Materialis Companion Published 02/06/2023 Severity Medium CVE-2022-4481Mesmerize Companion < 1.6.135 - Contributor+ Stored XSS Exploitation status Public exploit Fix Affected product M Mesmerize Companion Published 01/16/2023 Severity Medium 
