WordPress colibri-page-builder has 11 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2023-2188 | The Colibri Page Builder for WordPress is vulnerable to SQL Injection via the ‘post_id’ parameter in versions up to, and including, 1.0.227 | high | 7.2 | <1.0.229 | 1.0.229 |
| CVE-2024-3340 | The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'colibri-gallery-slideshow' shor | medium | 5.4 | <1.0.274 | 1.0.274 |
| CVE-2024-3338 | The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image alt data parameter in all versions up t | medium | 4.4 | <1.0.274 | 1.0.274 |
| CVE-2024-3337 | The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'colibri_breadcrumb_element' sho | medium | 6.4 | <1.0.274 | 1.0.274 |
| CVE-2024-1870 | The Colibri Page Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ca | medium | 4.3 | <1.0.263 | 1.0.263 |
| CVE-2023-6988 | The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's extend_builder_render_js shortco | medium | 6.4 | <=1.0.239 | – |
| CVE-2024-5038 | The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up | medium | 6.4 | <1.0.277 | 1.0.277 |
| CVE-2024-2839 | The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'colibri_post_title' shortcode i | medium | 6.4 | <1.0.270 | 1.0.270 |
| CVE-2024-4451 | The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's colibri_video_player shortcode i | medium | 6.4 | <1.0.277 | 1.0.277 |
| CVE-2024-1361 | The Colibri Page Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.253. Thi | medium | 4.3 | <1.0.260 | 1.0.260 |
| CVE-2024-1362 | The Colibri Page Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.253. Thi | medium | 4.3 | <1.0.260 | 1.0.260 |
Find out in one command. phpwarden checks your WordPress install against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden wordpress /var/www/html
Or keep it checked automatically with the GitHub Action or a nightly cron; see WordPress docs.
Install docs How findings are ranked