Skip to content
OpenAdvisories

Product · Extend Themes

Colibri WP

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-33686

    Broken Access Control vulnerability affecting multiple WordPress themes by Extend Themes

    Missing Authorization vulnerability in Extend Themes Pathway, Extend Themes Hugo WP, Extend Themes Althea WP, Extend Themes Elevate WP, Extend Themes Brite, Extend Themes Colibri WP, Extend Themes Vertice.This issue affects Pathway: from n/a through 1.0.15; H…

    Extend Themes Colibri WP Althea WP Brite
  • Medium 4.3
    CVE-2024-1360

    Colibri WP <= 1.0.94 - Cross-Site Request Forgery to Limited Plugin Installation

    The Colibri WP theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.94. This is due to missing or incorrect nonce validation on the colibriwp_install_plugin() function. This makes it possible for unauthenti…

    Extend Themes Colibri WP Web / CMS