[ Vendor · 3 CVEs ]
extendthemes
CVEs affecting extendthemes published in the last 30 days, plus any extendthemes CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-109191 | 16 Oct 2026 | CVSS 4.3 | extendthemes Image Hub – Free Images from Unsplash, Pixabay, Pexels, Openverse & GiphyThe Image Hub – Free Images from Unsplash, Pixabay, Pexels, Openverse & Giphy plugin for WordPress is vulnerable to Sensitive Information Exposure in… | |
| CVE-2026-107758 | 16 Oct 2026 | CVSS 7.2 | extendthemes Colibri Page BuilderThe Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and… | |
| CVE-2026-100107 | 2 Oct 2026 | CVSS 7.2 | extendthemes Kubio AI Page BuilderThe Kubio AI Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and… |