Skip to content
Noroxi

extendthemes records

24 published records for vendor extendthemes.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
25%
Median publish → KEV
No record has entered KEV

Records by year

  1. 23
  2. 24
  3. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

24 records
  • CVE-2019-25142
    35Monitor

    Mesmerize <= 1.6.89 & Materialis <= 1.0.172 - Authenticated Arbitrary Options Update

    HighCVSS 8.8No exploitEPSS 1%

    extendthemes · materialisJun 6, 2023

  • CVE-2025-62751
    35Monitor

    WordPress Vireo theme <= 1.0.24 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    extendthemes · vireoDec 31, 2025

  • CVE-2024-2904
    35Monitor

    WordPress Calliope theme <= 1.0.33 - Cross Site Request Forgery (CSRF) vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    extendthemes · calliopeMar 26, 2024

  • CVE-2024-33688
    35Monitor

    WordPress Teluro theme <= 1.0.31 - Cross Site Request Forgery (CSRF) vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    extendthemes · teluroApr 26, 2024

  • CVE-2023-3204
    26Monitor

    Materialis <= 1.1.24 - Missing Authorization to Limited Arbitrary Options Update

    MediumCVSS 6.5No exploitEPSS 0%

    extendthemes · materialisJun 19, 2024

  • CVE-2025-59593
    23Monitor

    WordPress Colibri Page Builder Plugin < 1.0.334 - Cross Site Scripting (XSS) Vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    extendthemes · colibri page builderOct 22, 2025

  • CVE-2022-4762
    21Monitor

    Materialis Companion < 1.3.40 - Contributor+ Stored XSS via Shortcode

    MediumCVSS 5.4No exploitEPSS 1%

    extendthemes · materialis companionFeb 6, 2023

  • CVE-2022-4481
    21Monitor

    Mesmerize Companion < 1.6.135 - Contributor+ Stored XSS

    MediumCVSS 5.4No exploitEPSS 1%

    extendthemes · mesmerize companionJan 16, 2023

  • CVE-2024-3340
    21Monitor

    Colibri Page Builder <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri-gallery-slideshow' Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    extendthemes · colibri page builderMay 2, 2024

  • CVE-2024-3338
    21Monitor

    Colibri Page Builder <= 1.0.262 - Authenticated (Author+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    extendthemes · colibri page builderMay 2, 2024

  • CVE-2024-3337
    21Monitor

    Colibri Page Builder <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri_breadcrumb_element' Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    extendthemes · colibri page builderMay 2, 2024

  • CVE-2025-32185
    21Monitor

    WordPress Colibri Page Builder plugin <= 1.0.329 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    extendthemes · colibri page builderApr 4, 2025

  • CVE-2023-6988
    21Monitor

    Colibri Page Builder <= 1.0.239 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    extendthemes · colibri page builderJan 11, 2024

  • CVE-2023-50833
    21Monitor

    WordPress Colibri Page Builder Plugin <= 1.0.239 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    extendthemes · colibri page builderDec 21, 2023

  • CVE-2024-4707
    21Monitor

    Materialis Companion <= 1.3.41 - Authenticated (Contributor+) Store Cross-Site Scripting via materialis_contact_form Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    extendthemes · materialis companionJun 6, 2024

  • CVE-2024-5038
    21Monitor

    Colibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    extendthemes · colibri page builderJun 6, 2024

  • CVE-2024-2839
    21Monitor

    Colibri Page Builder <= 1.0.263 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    extendthemes · colibri page builderApr 2, 2024

  • CVE-2024-4451
    21Monitor

    Colibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_video_player Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    extendthemes · colibri page builderJun 7, 2024

  • CVE-2023-2188
    19Monitor

    Colibri Page Builder <= 1.0.227 - Authenticated (Administrator+) SQL Injection via post_id

    MediumCVSS 4.9No exploitEPSS 1%

    extendthemes · colibri page builderAug 31, 2023

  • CVE-2024-1870
    17Monitor

    Colibri Page Builder <= 1.0.260 - Missing Authorization

    MediumCVSS 4.3No exploitEPSS 0%

    extendthemes · colibri page builderMar 9, 2024

  • CVE-2024-28004
    17Monitor

    WordPress Colibri Page Builder plugin <= 1.0.248 - Broken Access Control vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    extendthemes · colibri page builderMar 28, 2024

  • CVE-2024-1361
    17Monitor

    Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via extend_builder

    MediumCVSS 4.3No exploitEPSS 0%

    extendthemes · colibri page builderFeb 23, 2024

  • CVE-2024-1362
    17Monitor

    Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via cp_shortcode_refresh

    MediumCVSS 4.3No exploitEPSS 0%

    extendthemes · colibri page builderFeb 23, 2024

  • CVE-2024-34809
    17Monitor

    WordPress EmpowerWP theme <= 1.0.21 - Cross Site Request Forgery (CSRF) vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    extendthemes · empowerwpMay 17, 2024