Extend Themes vulnerabilities
11 vulnerabilities
Known vulnerabilities in Extend Themes products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 15 products.
Products
14 of 15- Colibri Page Builder2 vulnerabilities
- Kubio AI Page Builder2 vulnerabilities
- Althea WP1 vulnerabilities
- Brite1 vulnerabilities
- Calliope1 vulnerabilities
- Colibri WP1 vulnerabilities
- Elevate WP1 vulnerabilities
- Empowerwp1 vulnerabilities
- Hugo WP1 vulnerabilities
- Kubio AI Website Builder1 vulnerabilities
- Pathway1 vulnerabilities
- Skyline WP1 vulnerabilities
- Teluro1 vulnerabilities
- Vertice1 vulnerabilities
CVE-2025-59593extend themescolibri page builder+2
EPSS score0.22%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Colibri Page Builder colibri-page-builder allows Stored XSS.This issue affects Colibri Page Builder: from n/a through < 1.0.334.CVE-2025-32185extend themescolibri page builder+2EPSS score0.41%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Colibri Page Builder colibri-page-builder allows Stored XSS.This issue affects Colibri Page Builder: from n/a through <= 1.0.329.CVE-2024-2904extend themescalliope+2EPSS score0.20%
Cross-Site Request Forgery (CSRF) vulnerability in Extend Themes Calliope.This issue affects Calliope: from n/a through 1.0.33.CVE-2024-34810extend themesskyline wp+6EPSS score0.12%
Cross-Site request forgery (CSRF) vulnerability in Extend Themes Skyline WP allows Cross Site Request Forgery.
This issue affects Skyline WP: from n/a through 1.0.10.CVE-2024-34809extend themesempowerwp+2EPSS score0.18%
Cross-Site Request Forgery (CSRF) vulnerability in Extend Themes EmpowerWP.This issue affects EmpowerWP: from n/a through 1.0.21.CVE-2024-33688extend themesteluro+2EPSS score0.20%
Cross-Site Request Forgery (CSRF) vulnerability in Extend Themes Teluro.This issue affects Teluro: from n/a through 1.0.31.CVE-2024-33686extend themesalthea wp+15EPSS score0.50%
Missing Authorization vulnerability in Extend Themes Pathway, Extend Themes Hugo WP, Extend Themes Althea WP, Extend Themes Elevate WP, Extend Themes Brite, Extend Themes Colibri WP, Extend Themes Vertice.This issue affects Pathway: from n/a through 1.0.15; Hugo WP: from n/a through 1.0.8; Althea WP: from n/a through 1.0.13; Elevate WP: from n/a through 1.0.15; Brite: from n/a through 1.0.11; Colibri WP: from n/a through 1.0.94; Vertice: from n/a through 1.0.7.CVE-2026-94167extend themeskubio ai page builder+1EPSS score0.18%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Kubio AI Page Builder kubio allows Reflected XSS.This issue affects Kubio AI Page Builder: from n/a through 2.9.3.CVE-2026-83492extend themeskubio ai website builder+1EPSS score0.41%
Improper input validation vulnerability in Extend Themes Kubio AI Website Builder.
This issue affects Kubio AI Website Builder: before 2.9.1.CVE-2026-78268extend themeslead generation contact widget & ai chatbot: chat button, phone call, telegram, email – siteleads+1EPSS score0.42%
Unauthenticated Sensitive Data Exposure in Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads <= 1.2.0 versions.CVE-2026-34887extend themeskubio ai page builder+1EPSS score0.22%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Kubio AI Page Builder allows Stored XSS.This issue affects Kubio AI Page Builder: from n/a through 2.7.0.