İçeriğe atla
Noroxi

extendthemes kayıtları

extendthemes üreticisine ait 24 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%25
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 23
  2. 24
  3. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

24 kayıt
  • CVE-2019-25142
    35İzleyin

    Mesmerize <= 1.6.89 & Materialis <= 1.0.172 - Authenticated Arbitrary Options Update

    YüksekCVSS 8,8İstismar yokEPSS %1

    extendthemes · materialis6 Haz 2023

  • CVE-2025-62751
    35İzleyin

    WordPress Vireo theme <= 1.0.24 - Broken Access Control vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    extendthemes · vireo31 Ara 2025

  • CVE-2024-2904
    35İzleyin

    WordPress Calliope theme <= 1.0.33 - Cross Site Request Forgery (CSRF) vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    extendthemes · calliope26 Mar 2024

  • CVE-2024-33688
    35İzleyin

    WordPress Teluro theme <= 1.0.31 - Cross Site Request Forgery (CSRF) vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    extendthemes · teluro26 Nis 2024

  • CVE-2023-3204
    26İzleyin

    Materialis <= 1.1.24 - Missing Authorization to Limited Arbitrary Options Update

    OrtaCVSS 6,5İstismar yokEPSS %0

    extendthemes · materialis19 Haz 2024

  • CVE-2025-59593
    23İzleyin

    WordPress Colibri Page Builder Plugin < 1.0.334 - Cross Site Scripting (XSS) Vulnerability

    OrtaCVSS 5,9İstismar yokEPSS %0

    extendthemes · colibri page builder22 Eki 2025

  • CVE-2022-4762
    21İzleyin

    Materialis Companion < 1.3.40 - Contributor+ Stored XSS via Shortcode

    OrtaCVSS 5,4İstismar yokEPSS %1

    extendthemes · materialis companion6 Şub 2023

  • CVE-2022-4481
    21İzleyin

    Mesmerize Companion < 1.6.135 - Contributor+ Stored XSS

    OrtaCVSS 5,4İstismar yokEPSS %1

    extendthemes · mesmerize companion16 Oca 2023

  • CVE-2024-3340
    21İzleyin

    Colibri Page Builder <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri-gallery-slideshow' Shortcode

    OrtaCVSS 5,4İstismar yokEPSS %0

    extendthemes · colibri page builder2 May 2024

  • CVE-2024-3338
    21İzleyin

    Colibri Page Builder <= 1.0.262 - Authenticated (Author+) Stored Cross-Site Scripting

    OrtaCVSS 5,4İstismar yokEPSS %0

    extendthemes · colibri page builder2 May 2024

  • CVE-2024-3337
    21İzleyin

    Colibri Page Builder <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri_breadcrumb_element' Shortcode

    OrtaCVSS 5,4İstismar yokEPSS %0

    extendthemes · colibri page builder2 May 2024

  • CVE-2025-32185
    21İzleyin

    WordPress Colibri Page Builder plugin <= 1.0.329 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 5,4İstismar yokEPSS %0

    extendthemes · colibri page builder4 Nis 2025

  • CVE-2023-6988
    21İzleyin

    Colibri Page Builder <= 1.0.239 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    OrtaCVSS 5,4İstismar yokEPSS %0

    extendthemes · colibri page builder11 Oca 2024

  • CVE-2023-50833
    21İzleyin

    WordPress Colibri Page Builder Plugin <= 1.0.239 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 5,4İstismar yokEPSS %0

    extendthemes · colibri page builder21 Ara 2023

  • CVE-2024-4707
    21İzleyin

    Materialis Companion <= 1.3.41 - Authenticated (Contributor+) Store Cross-Site Scripting via materialis_contact_form Shortcode

    OrtaCVSS 5,4İstismar yokEPSS %0

    extendthemes · materialis companion6 Haz 2024

  • CVE-2024-5038
    21İzleyin

    Colibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    OrtaCVSS 5,4İstismar yokEPSS %0

    extendthemes · colibri page builder6 Haz 2024

  • CVE-2024-2839
    21İzleyin

    Colibri Page Builder <= 1.0.263 - Authenticated (Contributor+) Stored Cross-Site Scripting

    OrtaCVSS 5,4İstismar yokEPSS %0

    extendthemes · colibri page builder2 Nis 2024

  • CVE-2024-4451
    21İzleyin

    Colibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_video_player Shortcode

    OrtaCVSS 5,4İstismar yokEPSS %0

    extendthemes · colibri page builder7 Haz 2024

  • CVE-2023-2188
    19İzleyin

    Colibri Page Builder <= 1.0.227 - Authenticated (Administrator+) SQL Injection via post_id

    OrtaCVSS 4,9İstismar yokEPSS %1

    extendthemes · colibri page builder31 Ağu 2023

  • CVE-2024-1870
    17İzleyin

    Colibri Page Builder <= 1.0.260 - Missing Authorization

    OrtaCVSS 4,3İstismar yokEPSS %0

    extendthemes · colibri page builder9 Mar 2024

  • CVE-2024-28004
    17İzleyin

    WordPress Colibri Page Builder plugin <= 1.0.248 - Broken Access Control vulnerability

    OrtaCVSS 4,3İstismar yokEPSS %0

    extendthemes · colibri page builder28 Mar 2024

  • CVE-2024-1361
    17İzleyin

    Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via extend_builder

    OrtaCVSS 4,3İstismar yokEPSS %0

    extendthemes · colibri page builder23 Şub 2024

  • CVE-2024-1362
    17İzleyin

    Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via cp_shortcode_refresh

    OrtaCVSS 4,3İstismar yokEPSS %0

    extendthemes · colibri page builder23 Şub 2024

  • CVE-2024-34809
    17İzleyin

    WordPress EmpowerWP theme <= 1.0.21 - Cross Site Request Forgery (CSRF) vulnerability

    OrtaCVSS 4,3İstismar yokEPSS %0

    extendthemes · empowerwp17 May 2024