WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Colibri Page Builder

Colibri Page Builder adds drag and drop page builder functionality to the ColibriWP theme.

18Reported vulnerabilities
6.4Highest CVSS score
1.0.378Latest version
90,000+Active installs

What to do now

Update Colibri Page Builder to 1.0.358 or later. 18 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 23, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2025-11747 Medium 6.4 0.3% 0 to 1.0.345 (inclusive) 1.0.358 December 19, 2025
CVE-2025-32185 Medium 6.4 0.4% 1.0.319 and earlier 1.0.332 April 4, 2025
CVE-2023-50833 Medium 6.4 0.4% 1.0.240 and earlier 1.0.241 December 19, 2023
CVE-2025-11376 Medium 6.4 0.2% 1.0.335 and earlier 1.0.342 December 12, 2025
CVE-2025-9560 Medium 6.4 0.2% 0 to 1.0.334 (inclusive) 1.0.335 October 11, 2025
CVE-2024-4451 Medium 5.4 0.3% Before 1.0.277 1.0.277 June 7, 2024
CVE-2024-5038 Medium 5.4 0.3% Before 1.0.277 1.0.277 June 6, 2024
CVE-2024-3340 Medium 5.4 0.4% Before 1.0.274 1.0.274 May 2, 2024
CVE-2024-3338 Medium 5.4 0.4% Before 1.0.274 1.0.274 May 2, 2024
CVE-2024-3337 Medium 5.4 0.4% Before 1.0.274 1.0.274 May 2, 2024
CVE-2024-2839 Medium 5.4 0.3% Before 1.0.270 1.0.270 April 2, 2024
CVE-2023-6988 Medium 5.4 0.4% 1.0.239 and earlier 1.0.240 January 11, 2024
CVE-2023-2188 Medium 4.9 0.8% Before 1.0.229 1.0.229 August 31, 2023
CVE-2025-59593 Medium 4.4 0.2% Before 1.0.334 1.0.334 September 22, 2025
CVE-2024-28004 Medium 4.3 0.4% 1.0.248 and earlier 1.0.249 March 26, 2024
CVE-2024-1870 Medium 4.3 0.4% Before 1.0.263 1.0.263 March 9, 2024
CVE-2024-1362 Medium 4.3 0.2% Before 1.0.260 1.0.260 February 23, 2024
CVE-2024-1361 Medium 4.3 0.2% Before 1.0.260 1.0.260 February 23, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.