Extend Themes vulnerabilities

CVEs per yearBy the year they were published

1. 20244
2. 20252
3. 20265

Newest CVEs

• CVE-2026-94167

  WordPress Kubio AI Page Builder plugin <= 2.9.3 - Cross Site Scripting (XSS) vulnerability

  Extend Themes · Kubio AI Page Builder

  High7.1
• CVE-2026-83492

  WordPress Kubio AI Website Builder - Denial Of Service

  Extend Themes · Kubio AI Website Builder

  Medium6.9
• CVE-2026-78268

  WordPress Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads plugin <= 1.2.0 - Sensitive Data Exposure vulnerability

  Extend Themes · Lead Generation Contact Widget &amp; AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads

  High7.5
• CVE-2024-34810

  WordPress Skyline WP theme <= 1.0.10 - Cross Site Request Forgery (CSRF) vulnerability

  Extend Themes · Skyline WP

  Medium4.3
• CVE-2026-34887

  WordPress Kubio AI Page Builder plugin <= 2.7.0 - Cross Site Scripting (XSS) vulnerability

  Extend Themes · Kubio AI Page Builder

  Medium6.5
• CVE-2025-59593

  WordPress Colibri Page Builder Plugin < 1.0.334 - Cross Site Scripting (XSS) Vulnerability

  Extend Themes · Colibri Page Builder

  Medium5.9
• CVE-2025-32185

  WordPress Colibri Page Builder plugin <= 1.0.329 - Cross Site Scripting (XSS) vulnerability

  Extend Themes · Colibri Page Builder

  Medium6.5
• CVE-2024-34809

  WordPress EmpowerWP theme <= 1.0.21 - Cross Site Request Forgery (CSRF) vulnerability

  Extend Themes · EmpowerWP

  Medium4.3
• CVE-2024-33686

  Broken Access Control vulnerability affecting multiple WordPress themes by Extend Themes

  Extend Themes · Pathway

  Medium4.3
• CVE-2024-33688

  WordPress Teluro theme <= 1.0.31 - Cross Site Request Forgery (CSRF) vulnerability

  Extend Themes · Teluro

  Medium4.3