Skip to content
OpenAdvisories

Vendor

Colabrio

6 known vulnerabilities.

Products

Ohio Extra 3 Stockie Extra 2 Norebro Extra 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-32571

    WordPress Ohio Extra plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability

    Subscriber Cross Site Scripting (XSS) in Ohio Extra <= 3.6.8 versions.

    Colabrio Ohio Extra
  • Medium 6.5
    CVE-2025-64225

    WordPress Stockie Extra plugin <= 1.2.11 - Content Injection vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in colabrio Stockie Extra stockie-extra allows Code Injection.This issue affects Stockie Extra: from n/a through <= 1.2.11.

    Colabrio Stockie Extra
  • Medium 5.3
    CVE-2025-64633

    WordPress Norebro Extra plugin <= 1.6.8 - Content Injection vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in colabrio Norebro Extra norebro-extra allows Code Injection.This issue affects Norebro Extra: from n/a through <= 1.6.8.

    Colabrio Norebro Extra
  • Medium 6.5
    CVE-2025-64365

    WordPress Ohio Extra plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in colabrio Ohio Extra ohio-extra allows DOM-Based XSS.This issue affects Ohio Extra: from n/a through <= 3.6.0.

    Colabrio Ohio Extra
  • Medium 4.3
    CVE-2025-64226

    WordPress Stockie Extra plugin <= 1.2.11 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in colabrio Stockie Extra stockie-extra allows Cross Site Request Forgery.This issue affects Stockie Extra: from n/a through <= 1.2.11.

    Colabrio Stockie Extra
  • Medium 6.5
    CVE-2025-26924

    WordPress Ohio Theme Extra plugin <= 3.4.7 - Shortcode Injection vulnerability

    Improper Control of Generation of Code ('Code Injection') vulnerability in colabrio Ohio Extra ohio-extra allows Code Injection.This issue affects Ohio Extra: from n/a through <= 3.4.7.

    Colabrio Ohio Extra