Vulnerabilities in ExtendThemes

28 results
Vexday analysis

ExtendThemes apresenta footprint reduzido de apenas 3 vulnerabilidades catalogadas, nenhuma delas sob exploração ativa conhecida ou com severidade crítica. A fraqueza dominante é CWE-79 (Cross-site Scripting), padrão em componentes web, e não há atividade recente de divulgação, indicando risco baixo no horizonte imediato.

CVE-2025-11376MEDIUMColibri Page Builder <= 1.0.335 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2025-9560MEDIUMColibri Page Builder <= 1.0.334 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_newsletter ShortcodeEPSS 0.2%CVE-2024-1361MEDIUMColibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via extend_builderEPSS 0.2%CVE-2024-1362MEDIUMColibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via cp_shortcode_refreshEPSS 0.2%CVE-2024-1360MEDIUMColibri WP <= 1.0.94 - Cross-Site Request Forgery to Limited Plugin InstallationEPSS 0.2%CVE-2025-62751MEDIUMWordPress Vireo theme <= 1.0.24 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2024-37431MEDIUMWordPress Mesmerize theme <= 1.6.120 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2024-37458MEDIUMWordPress Highlight theme <= 1.0.29 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%