WordPress Colibri Page Builder plugin <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_video_player Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via colibrivideoplayer Shortcode vulnerability discovered by Ngô Thiên An ancorn in WordPress Plugin Colibri Page Builder versions = 1.0.276...

WordPress Colibri Page Builder plugin <= 1.0.286 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library

Authenticated Contributor+ Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library vulnerability discovered by Webbernaut in WordPress Plugin Colibri Page Builder versions = 1.0.286...

WordPress Colibri WP theme <= 1.0.94 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Theme Colibri WP versions = 1.0.94...

WordPress Colibri Page Builder Plugin <= 1.0.272 is vulnerable to Cross Site Scripting (XSS)

Software Colibri Page Builder Type Plugin Vulnerable versions = 1.0.272 Fixed in 1.0.274 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3340 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 39692f6fa930 Credits Ngô Thiên An...

WordPress Colibri Page Builder Plugin <= 1.0.262 is vulnerable to Cross Site Scripting (XSS)

Software Colibri Page Builder Type Plugin Vulnerable versions = 1.0.262 Fixed in 1.0.264 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3338 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 41440fdca449 Credits stealthcopter...

WordPress Colibri Page Builder Plugin <= 1.0.227 is vulnerable to SQL Injection

Software Colibri Page Builder Type Plugin Vulnerable versions = 1.0.227 Fixed in 1.0.229 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-2188 Patch priority Low CVSS severity Low 7.2 Developer Claim ownership PSID c1922d4070dd Credits Marco Wotschka Required privilege...