Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

extendthemes vulnerabilities

34 published CVEs name extendthemes among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2026-115816

    Kubio AI Page Builder <= 2.9.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via kubio/shortcode Block via Product Review

    extendthemes · Kubio AI Page Builder

    Medium6.4
  • CVE-2026-109191

    Image Hub <= 1.2.0 - Authenticated (Subscriber+) Sensitive Information Exposure in Admin Page HTML

    extendthemes · Image Hub – Free Images from Unsplash, Pixabay, Pexels, Openverse & Giphy

    Medium4.3
  • CVE-2026-107758

    Colibri Page Builder <= 1.0.390 - Unauthenticated Stored Cross-Site Scripting via Comments

    extendthemes · Colibri Page Builder

    High7.2
  • CVE-2026-100107

    Kubio AI Page Builder <= 2.9.2 - Unauthenticated Stored Cross-Site Scripting via SVG Comment Content (KSES Allowlist Bypass)

    extendthemes · Kubio AI Page Builder

    High7.2
  • CVE-2026-14472

    Kubio AI Page Builder <= 2.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via kubio/copyright Block Content

    extendthemes · Kubio AI Page Builder

    Medium6.4
  • CVE-2026-16779

    Kubio AI Page Builder <= 2.8.5 - Missing Authorization to Authenticated (Contributor+) Front-Page/Menu/Template Configuration Reversion via kubio_restore_front_page AJAX Action

    extendthemes · Kubio AI Page Builder

    Medium4.3
  • CVE-2026-5427

    Kubio AI Page Builder <= 2.7.2 - Missing Authorization to Authenticated (Contributor+) Limited File Upload via Kubio Block Attributes

    extendthemes · Kubio AI Page Builder

    Medium5.3
  • CVE-2025-62751

    WordPress Vireo theme <= 1.0.24 - Broken Access Control vulnerability

    extendthemes · Vireo

    Medium4.3
  • CVE-2025-11747

    Colibri Page Builder <= 1.0.345 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    extendthemes · Colibri Page Builder

    Medium6.4
  • CVE-2025-11376

    Colibri Page Builder <= 1.0.335 - Authenticated (Contributor+) Stored Cross-Site Scripting

    extendthemes · Colibri Page Builder

    Medium6.4
All 34 in the list