colorlib vulnerabilities (CVE)

CVE records published for colorlib, newest first. Follow to get an email when a new one appears.

2 results
6.1Medium
CVE-2025-3662

FancyBox for WordPress < 3.3.6 - Unauthenticated Stored XSS

FancyBox for WordPress

The FancyBox for WordPress plugin before 3.3.6 does not escape captions and titles attributes before using them to populate galleries' caption fields. The issue was received as a Contributor+ Stored XSS, however one of our researcher (Marc Montpas) escalated …

5.3Medium
CVE-2024-1473

Coming Soon & Maintenance Mode by Colorlib <= 1.0.99 - Information Exposure

colorlibplugins Coming Soon & Maintenance Mode by Colorlib; colorlib coming_soon_\&_maintenance_mode

The Coming Soon & Maintenance Mode by Colorlib plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.99 via the REST API. This makes it possible for unauthenticated attackers to obtain post and page contents via …