Plugin icon

Colibri Page Builder

colibri-page-builder

Vulnerabilities:

19

Last Updated:

August 31, 2026

Active Installs:

80000

Published
Title
Fixed in
CVSS
Published
2026-10-15
Title
Colibri Page Builder < 1.0.392 - Unauthenticated Stored Cross-Site Scripting via Comments
Fixed in
Fixed in 1.0.392
CVSS
7.2 (high)
Published
2025-12-18
Title
Colibri Page Builder < 1.0.358 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 1.0.358
CVSS
6.4 (medium)
Published
2025-12-12
Title
Colibri Page Builder < 1.0.342 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.0.342
CVSS
6.4 (medium)
Published
2025-10-10
Title
Colibri Page Builder < 1.0.335 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_newsletter Shortcode
Fixed in
Fixed in 1.0.335
CVSS
6.4 (medium)
Published
2025-09-22
Title
Colibri Page Builder < 1.0.334 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.0.334
CVSS
4.4 (medium)
Published
2025-04-04
Title
Colibri Page Builder < 1.0.332 - Contributor+ Stored XSS
Fixed in
Fixed in 1.0.332
CVSS
5.9 (medium)
Published
2024-12-03
Title
Multiple Plugins - Contributor+ DOM-Based Stored XSS via FancyBox JavaScript Library
Fixed in
Fixed in 1.0.288
CVSS
5.9 (medium)
Published
2024-06-06
Title
Colibri Page Builder < 1.0.277 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_video_player Shortcode
Fixed in
Fixed in 1.0.277
CVSS
6.4 (medium)
Published
2024-06-05
Title
Colibri Page Builder < 1.0.277 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 1.0.277
CVSS
6.4 (medium)
Published
2024-04-22
Title
Colibri Page Builder < 1.0.272 - Contributor+ Stored Cross-Site Scripting via the plugin's 'colibri_breadcrumb_element' shortcode
Fixed in
Fixed in 1.0.274
CVSS
6.4 (medium)
Published
2024-04-22
Title
Colibri Page Builder < 1.0.264 - Author+ Stored Cross-Site Scripting
Fixed in
Fixed in 1.0.264
CVSS
4.4 (medium)
Published
2024-04-22
Title
Colibri Page Builder < 1.0.272 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 1.0.274
CVSS
5.4 (medium)
Published
2024-04-01
Title
Colibri Page Builder < 1.0.270 - Contributor+ Stored XSS
Fixed in
Fixed in 1.0.270
CVSS
5.9 (medium)
Published
2024-03-26
Title
Colibri Page Builder < 1.0.249 - Missing Authorization
Fixed in
Fixed in 1.0.249
CVSS
4.3 (medium)
Published
2024-02-22
Title
Colibri Page Builder < 1.0.260 - Import Images, Delete Post, Save Theme Data via CSRF
Fixed in
Fixed in 1.0.260
CVSS
4.3 (medium)
Published
2024-02-22
Title
Colibri Page Builder < 1.0.260 - Arbitrary Shortcode Call via CSRF
Fixed in
Fixed in 1.0.260
CVSS
4.3 (medium)
Published
2023-12-23
Title
Colibri Page Builder < 1.0.240 - Contributor+ Stored XSS
Fixed in
Fixed in 1.0.240
CVSS
5.9 (medium)
Published
2023-12-19
Title
Colibri Page Builder < 1.0.248 - Contributor+ Stored XSS
Fixed in
Fixed in 1.0.248
CVSS
5.9 (medium)
Published
2023-06-22
Title
Colibri Page Builder < 1.0.229 - Admin+ SQL Injection
Fixed in
Fixed in 1.0.229
CVSS
4.1 (medium)