Skip to content
Noroxi

Colibri Page Builder

colibri-page-builder · plugin

Known security vulnerabilities for Colibri Page Builder. Find out in seconds which version runs on your site with WP Lens.

18 known vulnerabilities

latest Dec 19, 2025

Vulnerabilities

  • CVE-2025-11747

    Colibri Page Builder <= 1.0.345 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    Medium 6.4

  • CVE-2025-11376

    Colibri Page Builder <= 1.0.335 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Medium 6.4

  • CVE-2025-9560

    Colibri Page Builder <= 1.0.334 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_newsletter Shortcode

    Medium 6.4

  • CVE-2025-59593

    WordPress Colibri Page Builder Plugin < 1.0.334 - Cross Site Scripting (XSS) Vulnerability

    Medium 5.9

  • CVE-2025-32185

    WordPress Colibri Page Builder plugin <= 1.0.329 - Cross Site Scripting (XSS) vulnerability

    Medium 5.4

  • CVE-2024-4451

    Colibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_video_player Shortcode

    Medium 5.4

  • CVE-2024-5038

    Colibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    Medium 5.4

  • CVE-2024-3340

    Colibri Page Builder <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri-gallery-slideshow' Shortcode

    Medium 5.4

  • CVE-2024-3338

    Colibri Page Builder <= 1.0.262 - Authenticated (Author+) Stored Cross-Site Scripting

    Medium 5.4

  • CVE-2024-3337

    Colibri Page Builder <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri_breadcrumb_element' Shortcode

    Medium 5.4

  • CVE-2024-2839

    Colibri Page Builder <= 1.0.263 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Medium 5.4

  • CVE-2023-6988

    Colibri Page Builder <= 1.0.239 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    Medium 5.4

  • CVE-2023-50833

    WordPress Colibri Page Builder Plugin <= 1.0.239 is vulnerable to Cross Site Scripting (XSS)

    Medium 5.4

  • CVE-2023-2188

    Colibri Page Builder <= 1.0.227 - Authenticated (Administrator+) SQL Injection via post_id

    Medium 4.9

  • CVE-2024-28004

    WordPress Colibri Page Builder plugin <= 1.0.248 - Broken Access Control vulnerability

    Medium 4.3

  • CVE-2024-1870

    Colibri Page Builder <= 1.0.260 - Missing Authorization

    Medium 4.3

  • CVE-2024-1362

    Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via cp_shortcode_refresh

    Medium 4.3

  • CVE-2024-1361

    Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via extend_builder

    Medium 4.3

← Back to directory