Medium
CVE-2025-11747
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 19
Reset filters
Medium
CVE-2025-11376
Colibri Page Builder <= 1.0.335 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-9560
Colibri Page Builder <= 1.0.334 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_newsletter Shortcode
Medium
CVE-2025-59593
Colibri Page Builder < 1.0.334 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Medium
CVE-2025-32185
Colibri Page Builder <= 1.0.319 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-5020
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library
Medium
CVE-2024-4451
Colibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_video_player Shortcode
Medium
CVE-2024-5038
Colibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-3340
Colibri Page Builder <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri-gallery-slideshow' Shortcode
Medium
CVE-2024-3337
Colibri Page Builder <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri_breadcrumb_element' Shortcode
Medium
CVE-2024-3338
Colibri Page Builder <= 1.0.262 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-2839
Colibri Page Builder <= 1.0.263 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-28004
Colibri Page Builder <= 1.0.248 - Missing Authorization
Medium
CVE-2024-1870
Colibri Page Builder <= 1.0.260 - Missing Authorization
Medium
CVE-2024-1362
Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via cp_shortcode_refresh
Medium
CVE-2024-1361
Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via extend_builder
Medium
CVE-2023-6988
Colibri Page Builder <= 1.0.239 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-50833
Colibri Page Builder <= 1.0.240 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-2188
Colibri Page Builder <= 1.0.227 - Authenticated (Administrator+) SQL Injection via post_id
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.