Skip to content
PluginCanary

Colibri Page Builder

by Extend Themes · 80,000+ active installs · Checked 3 Nov 2026
Healthy1 Warning

Healthy: vulnerability published 15 Oct 2026, fixed in 1.0.392.

83/ 100 Canary Score
Sub-scores for Colibri Page Builder
Ownership100
Maintenance100
Security60
Support70
Reputation85

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 15 Oct 2026, fixed in 1.0.392. Update to version 1.0.392 or later.15 Oct 2026Evidence
  • InfoSEC-37 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master30 Jul 2019 to 30 Jul 2019, 1 commits
extendthemes31 Jul 2019 to 31 Aug 2026, 90 commits
iulianp13 Oct 2026 to 13 Oct 2026, 1 commits

New committer iulianp made a first commit on 13 Oct 2026.

Maintenance

Last release
22 days ago
Releases, 24 months
0
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter for Colibri Page Builder
Q1 20240
Q2 20240
Q3 20241
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20260

Last release 13 Oct 2026. Tested with WordPress 7.1 (current).

Support

0% of 2 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
15 Oct 2026Colibri Page Builder <= 1.0.390 - Unauthenticated Stored Cross-Site Scripting via Comments7.2<= 1.0.3901.0.392n/a
18 Dec 2025Colibri Page Builder <= 1.0.345 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 1.0.3451.0.358n/a
12 Dec 2025Colibri Page Builder <= 1.0.335 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.0.3351.0.342n/a
10 Oct 2025Colibri Page Builder <= 1.0.334 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_newsletter Shortcode6.4<= 1.0.3341.0.335n/a
22 Sep 2025Colibri Page Builder < 1.0.334 - Authenticated (Shop manager+) Stored Cross-Site Scripting4.4< 1.0.3341.0.334n/a
4 Apr 2025Colibri Page Builder <= 1.0.319 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.0.3191.0.332n/a
3 Dec 2024Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library6.4<= 1.0.2861.0.288n/a
6 Jun 2024Colibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_video_player Shortcode6.4<= 1.0.2761.0.277n/a
5 Jun 2024Colibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 1.0.2761.0.277n/a
22 Apr 2024Colibri Page Builder <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri-gallery-slideshow' Shortcode5.4<= 1.0.2721.0.274n/a
22 Apr 2024Colibri Page Builder <= 1.0.262 - Authenticated (Author+) Stored Cross-Site Scripting4.4<= 1.0.2621.0.264n/a
22 Apr 2024Colibri Page Builder <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri_breadcrumb_element' Shortcode6.4<= 1.0.2721.0.274n/a
1 Apr 2024Colibri Page Builder <= 1.0.263 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.0.2631.0.270n/a
26 Mar 2024Colibri Page Builder <= 1.0.248 - Missing Authorization4.3<= 1.0.2481.0.249n/a
8 Mar 2024Colibri Page Builder <= 1.0.260 - Missing Authorization4.3<= 1.0.2601.0.263n/a
22 Feb 2024Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via cp_shortcode_refresh4.3<= 1.0.2531.0.260n/a
22 Feb 2024Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via extend_builder4.3<= 1.0.2531.0.260n/a
23 Dec 2023Colibri Page Builder <= 1.0.239 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 1.0.2391.0.240n/a
19 Dec 2023Colibri Page Builder <= 1.0.240 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 1.0.2401.0.241n/a
22 Jun 2023Colibri Page Builder <= 1.0.227 - Authenticated (Administrator+) SQL Injection via post_id7.2<= 1.0.2271.0.229n/a

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Colibri Page Builder
Q1 20245.0
Q2 20245.0
Q3 20245.0
Q4 20245.0
Q1 20255.0
Q2 20254.8
Q3 20255.0
Q4 20255.0
Q1 20265.0
Q2 20265.0
Q3 20265.0
Q4 20265.0

Average rating stayed at 5.0 between Q1 2024 and Q4 2026.

Rating distribution
5 star64
4 star3
3 star3
2 star4
1 star6

Momentum

80,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Colibri Page Builder
4 May 20261,266
11 May 20262,752
18 May 202645,617
25 May 20265,572
1 Jun 20263,972
8 Jun 20263,478
15 Jun 20263,138
22 Jun 20262,801
29 Jun 20262,913
6 Jul 20262,712
13 Jul 20262,645
20 Jul 202641,171
27 Jul 20265,932
3 Aug 20266,004
10 Aug 20263,471
17 Aug 202643,818
24 Aug 20265,559
31 Aug 202642,421
7 Sep 20264,561
14 Sep 20265,909
21 Sep 20264,251
28 Sep 20263,198
5 Oct 20263,270
12 Oct 202642,878
19 Oct 20267,567
26 Oct 20266,533
2 Nov 2026567

Weekly downloads over the last 4 weeks are 28% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Fusion Page BuilderScore 87 · 3,000+SKT Page BuilderScore 87 · 2,000+Landing Page Builder - Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing PagesScore 86 · 8,000+

Facts

Version1.0.392
AuthorExtend Themes
Added31 Jul 2019
Last updated13 Oct 2026
Active installs80,000+
Requires WordPress5.6
Tested up to7.1.4
Requires PHPnot stated
CategoryDesign & Themes > Page Builders & Visual Editors
Tagseditor, colibri, landing page, page builder, drag-and-drop

Other plugins by this author: Kubio AI Page Builder, Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email - SiteLeads, Image Hub - Free Images from Unsplash, Pixabay, Pexels, Openverse & Giphy

Questions

Is Colibri Page Builder still maintained?

Colibri Page Builder was last updated on 13 Oct 2026. Its Canary status is Healthy.

Is Colibri Page Builder safe?

Colibri Page Builder has no open unpatched vulnerabilities on record. 7 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Colibri Page Builder?

The wordpress.org author is Extend Themes. Recent committers: iulianp, extendthemes, plugin-master. New committer iulianp made a first commit on 13 Oct 2026.

What can I use instead of Colibri Page Builder?

Plugins in the same category with a higher Canary Score: Fusion Page Builder, SKT Page Builder, Landing Page Builder - Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue