Read the docs

colabrio

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

colabrio records in CISA KEV

No colabrio vulnerabilities are listed in CISA KEV.

Records

6 records

TI-2025-40001 CVE-2025-64633 · GHSA-fmgq-3xhh-hjgc

WordPress Norebro Extra plugin <= 1.6.8 - Content Injection vulnerability

Priority LOW 30

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in colabrio Norebro Extra norebro-extra allows Code Injection.This issue affects Norebro Extra: from n/a through <= 1.6.8.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00281 Published 2025-12-16 No fix listed CWE-80
TI-2025-39668 CVE-2025-64225 · GHSA-3v85-pf4r-695w

WordPress Stockie Extra plugin <= 1.2.11 - Content Injection vulnerability

Priority LOW 29

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in colabrio Stockie Extra stockie-extra allows Code Injection.This issue affects Stockie Extra: from n/a through <= 1.2.11.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00309 Published 2025-12-18 No fix listed CWE-80
TI-2025-39798 CVE-2025-64365 · GHSA-r2w4-795m-g75f

WordPress Ohio Extra plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in colabrio Ohio Extra ohio-extra allows DOM-Based XSS.This issue affects Ohio Extra: from n/a through <= 3.6.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00165 Published 2025-10-31 No fix listed CWE-79
Open these records in search →