Extend Themes

10 CVEs across 15 Extend Themes products. Browse Extend Themes vulnerabilities, severities, and proof-of-concept exploits.

Extend Themes products with known CVEs

ProductCVEs
Colibri Page Builder2
Althea Wp1
Brite1
Calliope1
Colibri Wp1
Elevate Wp1
Empowerwp1
Hugo Wp1
Kubio Ai Page Builder1
Kubio Ai Website Builder1
Lead Generation Contact Widget &Amp; Ai Chatbot: Chat Button, Phone Call, Telegram, Email – Siteleads1
Pathway1
Skyline Wp1
Teluro1
Vertice1
Extend Themes CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-834922026-08-31Improper input validation vulnerability in Extend Themes Kubio AI Website Builder. This issue affects Kubio AI Website Builder: before 2.9.1.
CVE-2026-78268High7.52026-08-24Unauthenticated Sensitive Data Exposure in Lead Generation Contact Widget &amp; AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads <= 1.2.0 versi…
CVE-2024-34810Medium4.32026-06-17Cross-Site request forgery (CSRF) vulnerability in Extend Themes Skyline WP allows Cross Site Request Forgery. This issue affects Skyline WP: from n/a through…
CVE-2026-34887Medium6.52026-03-31Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Kubio AI Page Builder allows Stored XSS.Thi…
CVE-2025-59593Medium5.92025-10-22Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Colibri Page Builder colibri-page-builder a…
CVE-2025-32185Medium6.52025-04-04Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Colibri Page Builder colibri-page-builder a…
CVE-2024-34809Medium4.32024-05-17Cross-Site Request Forgery (CSRF) vulnerability in Extend Themes EmpowerWP.This issue affects EmpowerWP: from n/a through 1.0.21.
CVE-2024-33686Medium4.32024-04-29Missing Authorization vulnerability in Extend Themes Pathway, Extend Themes Hugo WP, Extend Themes Althea WP, Extend Themes Elevate WP, Extend Themes Brite, Ex…
CVE-2024-33688Medium4.32024-04-26Cross-Site Request Forgery (CSRF) vulnerability in Extend Themes Teluro.This issue affects Teluro: from n/a through 1.0.31.
CVE-2024-2904Medium4.32024-03-26Cross-Site Request Forgery (CSRF) vulnerability in Extend Themes Calliope.This issue affects Calliope: from n/a through 1.0.33.