WP-Safety

Colibri Page Builder Security & Risk Analysis

wordpress.org/plugins/colibri-page-builder

Colibri Page Builder adds drag and drop page builder functionality to the ColibriWP theme.

90K active installs v1.0.360 PHP + WP 5.6+ Updated Dec 17, 2025
colibridrag-and-dropeditorlanding-pagepage-builder
92
A · Safe
CVEs total18
Unpatched0
Last CVEDec 18, 2025
Plugin page Download
Safety Verdict

Is Colibri Page Builder Safe to Use in 2026?

Generally Safe

Score 92/100

Colibri Page Builder has a strong security track record. Known vulnerabilities have been patched promptly.

18 known CVEsLast CVE: Dec 18, 2025Updated 3mo ago
Risk Assessment

Colibri Page Builder v1.0.360 presents a mixed security posture with notable strengths in its use of prepared statements for SQL queries and generally good output escaping. However, significant concerns arise from its attack surface, particularly the presence of 9 AJAX handlers lacking authentication checks. This oversight creates a substantial risk of unauthorized actions if these handlers can be triggered by unauthenticated users. The taint analysis, while not revealing critical issues, did identify one high-severity flow with unsanitized paths, which warrants immediate attention. The plugin's history of 18 known CVEs, with a significant number of medium-severity and one high-severity vulnerability, suggests a pattern of past security weaknesses. While there are currently no unpatched CVEs, this history indicates a tendency for vulnerabilities to emerge. The last vulnerability being in the future is likely a data anomaly, but the sheer volume of past issues cannot be ignored. Overall, the plugin has some robust security implementations but is significantly hampered by an exposed attack surface and a history of numerous vulnerabilities, making it a moderate to high-risk plugin that requires careful monitoring and potential mitigation strategies.

Key Concerns

  • 9 unprotected AJAX handlers
  • 1 high severity taint flow
  • 18 total known CVEs
  • 1 high severity CVE
  • 3 dangerous functions (unserialize)
Vulnerabilities
18

Colibri Page Builder Security Vulnerabilities

CVEs by Year

3 CVEs in 2023
2023
10 CVEs in 2024
2024
5 CVEs in 2025
2025
Patched Has unpatched

Severity Breakdown

High
1
Medium
17

18 total CVEs

CVE-2025-11747medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Colibri Page Builder <= 1.0.345 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Dec 18, 2025 Patched in 1.0.358 (1d)
CVE-2025-11376medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Colibri Page Builder <= 1.0.335 - Authenticated (Contributor+) Stored Cross-Site Scripting

Dec 12, 2025 Patched in 1.0.342 (1d)
CVE-2025-9560medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Colibri Page Builder <= 1.0.334 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_newsletter Shortcode

Oct 10, 2025 Patched in 1.0.335 (1d)
CVE-2025-59593medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Colibri Page Builder < 1.0.334 - Authenticated (Shop manager+) Stored Cross-Site Scripting

Sep 22, 2025 Patched in 1.0.334 (5d)
CVE-2025-32185medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Colibri Page Builder <= 1.0.319 - Authenticated (Contributor+) Stored Cross-Site Scripting

Apr 4, 2025 Patched in 1.0.332 (14d)
CVE-2024-4451medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Colibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via colibri_video_player Shortcode

Jun 6, 2024 Patched in 1.0.277 (1d)
CVE-2024-5038medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Colibri Page Builder <= 1.0.276 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Jun 5, 2024 Patched in 1.0.277 (1d)
CVE-2024-3338medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Colibri Page Builder <= 1.0.262 - Authenticated (Author+) Stored Cross-Site Scripting

Apr 22, 2024 Patched in 1.0.264 (11d)
CVE-2024-3337medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Colibri Page Builder <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri_breadcrumb_element' Shortcode

Apr 22, 2024 Patched in 1.0.274 (11d)
CVE-2024-3340medium · 5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Colibri Page Builder <= 1.0.272 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'colibri-gallery-slideshow' Shortcode

Apr 22, 2024 Patched in 1.0.274 (11d)
CVE-2024-2839medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Colibri Page Builder <= 1.0.263 - Authenticated (Contributor+) Stored Cross-Site Scripting

Apr 1, 2024 Patched in 1.0.270 (1d)
CVE-2024-28004medium · 4.3Missing Authorization

Colibri Page Builder <= 1.0.248 - Missing Authorization

Mar 26, 2024 Patched in 1.0.249 (43d)
CVE-2024-1870medium · 4.3Missing Authorization

Colibri Page Builder <= 1.0.260 - Missing Authorization

Mar 8, 2024 Patched in 1.0.263 (1d)
CVE-2024-1361medium · 4.3Cross-Site Request Forgery (CSRF)

Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via extend_builder

Feb 22, 2024 Patched in 1.0.260 (1d)
CVE-2024-1362medium · 4.3Cross-Site Request Forgery (CSRF)

Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via cp_shortcode_refresh

Feb 22, 2024 Patched in 1.0.260 (1d)
CVE-2023-6988medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Colibri Page Builder <= 1.0.239 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Dec 23, 2023 Patched in 1.0.240 (220d)
CVE-2023-50833medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Colibri Page Builder <= 1.0.240 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Dec 19, 2023 Patched in 1.0.241 (35d)
CVE-2023-2188high · 7.2Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Colibri Page Builder <= 1.0.227 - Authenticated (Administrator+) SQL Injection via post_id

Jun 22, 2023 Patched in 1.0.229 (215d)
Code Analysis
Analyzed Mar 16, 2026

Colibri Page Builder Code Analysis

Dangerous Functions
3
Raw SQL Queries
0
11 prepared
Unescaped Output
84
343 escaped
Nonce Checks
16
Capability Checks
10
File Operations
17
External Requests
10
Bundled Libraries
0

Dangerous Functions Found

unserialize$value = unserialize($meta_item['value']);src\DemoImport\Hooks\ImportContentHook.php:435
unserialize$data = unserialize( $raw );src\DemoImport\Hooks\PreparationHook.php:53
unserialize$data = unserialize( $raw );src\OCDI\CustomizerImporter.php:92

SQL Query Safety

100% prepared11 total queries

Output Escaping

80% escaped427 total outputs
Data Flows
5 unsanitized

Data Flow Analysis

7 flows5 with unsanitized paths
resolveFont (src\GoogleFontsLocalLoader.php:325)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
9 unprotected

Colibri Page Builder Attack Surface

Entry Points70
Unprotected9

AJAX Handlers 18

authwp_ajax_crop_image_pre_saveextend-builder\extend-builder.php:145
authwp_ajax_colibri_wp_recommendation_hide_noticerecommendations\colibri-wp.php:112
authwp_ajax_colibri_page_builder_wpmu_settingrecommendations\wpmu.php:120
authwp_ajax_colibri_wpmu_forminator_hide_noticerecommendations\wpmu.php:672
authwp_ajax_get_after_import_builder_datasrc\DemoImport\DemoImport.php:57
authwp_ajax_extendthemes_ocdi_import_customizer_datasrc\DemoImport\Hooks\ImportCustomizerHook.php:17
authwp_ajax_colibriwp-page-builder-activatesrc\License\ActivationForm.php:13
authwp_ajax_colibriwp-page-builder-maybe-install-prosrc\License\ActivationForm.php:14
authwp_ajax_colibriwp-page-builder-check-licensesrc\License\CheckForm.php:10
authwp_ajax_extendthemes_get_remote_data_notificationssrc\Notify\NotificationsManager.php:90
authwp_ajax_cp_dismiss_notificationsrc\Notify\NotificationsManager.php:144
authwp_ajax_extendthemes_ocdi_import_demo_datasrc\OCDI\OneClickDemoImport.php:88
authwp_ajax_extendthemes_ocdi_import_customizer_datasrc\OCDI\OneClickDemoImport.php:89
authwp_ajax_extendthemes_ocdi_after_import_datasrc\OCDI\OneClickDemoImport.php:93
authwp_ajax_create_home_pagesrc\PageBuilder.php:290
authwp_ajax_cp_open_in_customizersrc\PageBuilder.php:292
authwp_ajax_cp_shortcode_refreshsrc\PageBuilder.php:293
authwp_ajax_cp_open_in_default_editorsrc\PageBuilder.php:305

REST API Routes 5

GET/wp-json/colibri/v1/menusextend-builder\api\menu-1.php:23
GET/wp-json/colibri/v1/newsletter/default-shortcodeextend-builder\api\newsletter.php:15
POST/wp-json/colibri/v1/pages/duplicateextend-builder\api\pages.php:28
POST/wp-json/colibri/v1/presetsextend-builder\api\presets.php:50
POST/wp-json/colibri/v1/presets/deleteextend-builder\api\presets.php:57

Shortcodes 47

[colibri_layout_wrapper] extend-builder\shortcodes\base.php:31
[colibri_item_template] extend-builder\shortcodes\blog\loop.php:5
[colibri_loop] extend-builder\shortcodes\blog\loop.php:11
[colibri_post_nav_button] extend-builder\shortcodes\blog\navigation.php:30
[colibri_archive_pagination] extend-builder\shortcodes\blog\navigation.php:108
[colibri_archive_nav_button] extend-builder\shortcodes\blog\navigation.php:117
[colibri_post_comments] extend-builder\shortcodes\blog\post-comment.php:5
[colibri_post_comment_form] extend-builder\shortcodes\blog\post-comment.php:52
[colibri_post_title] extend-builder\shortcodes\blog\post-item.php:5
[colibri_post_content] extend-builder\shortcodes\blog\post-item.php:6
[colibri_post_excerpt] extend-builder\shortcodes\blog\post-item.php:7
[colibri_post_categories] extend-builder\shortcodes\blog\post-item.php:8
[colibri_post_tags] extend-builder\shortcodes\blog\post-item.php:10
[colibri_post_class] extend-builder\shortcodes\blog\post-item.php:12
[colibri_post_id] extend-builder\shortcodes\blog\post-item.php:16
[colibri_post_thumbnail] extend-builder\shortcodes\blog\post-item.php:20
[colibri_post_link] extend-builder\shortcodes\blog\post-item.php:42
[colibri_post_thumbnail_url] extend-builder\shortcodes\blog\post-item.php:46
[colibri_post_meta_date_url] extend-builder\shortcodes\blog\post-item.php:51
[colibri_post_meta_author_url] extend-builder\shortcodes\blog\post-item.php:60
[colibri_post_meta_time_url] extend-builder\shortcodes\blog\post-item.php:64
[colibri_post_meta_comments_url] extend-builder\shortcodes\blog\post-item.php:70
[colibri_post_meta_comments_content] extend-builder\shortcodes\blog\post-item.php:74
[colibri_post_meta_author_content] extend-builder\shortcodes\blog\post-item.php:78
[colibri_post_meta_time_content] extend-builder\shortcodes\blog\post-item.php:82
[colibri_post_meta_date_content] extend-builder\shortcodes\blog\post-item.php:86
[colibri_post_thumbnail_classes] extend-builder\shortcodes\blog\post-item.php:95
[colibri_blog_posts] extend-builder\shortcodes\blog-posts.php:6
[colibri_breadcrumb_element] extend-builder\shortcodes\breadcrumb.php:5
[colibri_page_title] extend-builder\shortcodes\colibri_page_title.php:5
[colibri_contact_form] extend-builder\shortcodes\contact-form.php:6
[colibri_gallery] extend-builder\shortcodes\gallery.php:7
[colibri_fake_loop] extend-builder\shortcodes\general.php:6
[colibri_svg_icon] extend-builder\shortcodes\general.php:68
[colibri_copyright] extend-builder\shortcodes\general.php:72
[colibri_site_title] extend-builder\shortcodes\general.php:81
[colibri_home_url] extend-builder\shortcodes\general.php:85
[colibri_uploads_url] extend-builder\shortcodes\general.php:89
[colibri_custom_logo_url] extend-builder\shortcodes\general.php:106
[colibri_print_menu] extend-builder\shortcodes\menu-1.php:58
[colibri_newsletter] extend-builder\shortcodes\newsletter.php:101
[colibri_search] extend-builder\shortcodes\search.php:4
[colibri_video_player] extend-builder\shortcodes\video.php:4
[colibri_widget_area] extend-builder\shortcodes\widget-area.php:7
[colibri_wrapper] extend-builder\shortcodes\wrapper.php:5
[colibri_wrapper_state] extend-builder\shortcodes\wrapper.php:6
[colibri_wp_action] extend-builder\shortcodes\wrapper.php:8
WordPress Hooks 227
actionshutdowncolibri-page-builder.php:46
filtercolibri_page_builder/installedcolibri-page-builder.php:83
actioncolibri_page_builder/activatedcolibri-page-builder.php:101
actionrest_api_initextend-builder\api\menu-1.php:22
actionrest_api_initextend-builder\api\newsletter.php:14
actionrest_api_initextend-builder\api\pages.php:27
actionrest_api_initextend-builder\api\presets.php:49
actioncolibri_page_builder/template/load_assetsextend-builder\assets.php:121
actionwp_enqueue_scriptsextend-builder\assets.php:350
actioninitextend-builder\custom-posts.php:103
actionget_footerextend-builder\customizer\customizer-preview.php:5
filtercolibri_page_builder/templateextend-builder\customizer\customizer-preview.php:11
actioncolibri_page_builder/template/load_assetsextend-builder\customizer\customizer-preview.php:81
actioncustomize_preview_initextend-builder\customizer\customizer-preview.php:88
actioncustomize_preview_initextend-builder\customizer\customizer-preview.php:91
actionwp_headextend-builder\customizer\customizer-preview.php:96
actioncustomize_controls_print_scriptsextend-builder\customizer\customizer.php:21
actioncustomize_controls_enqueue_scriptsextend-builder\customizer\customizer.php:104
actioncustomize_controls_initextend-builder\customizer\customizer.php:109
actioncustomize_controls_enqueue_scriptsextend-builder\customizer\customizer.php:115
actioncustomize_controls_print_footer_scriptsextend-builder\customizer\customizer.php:132
actioncustomize_registerextend-builder\customizer\customizer.php:140
actioncustomize_registerextend-builder\customizer\customizer.php:281
filtercolibri_page_builder/customizer/preview_dataextend-builder\customizer\editor-data\index.php:9
filtercolibri_page_builder/customizer/preview_dataextend-builder\customizer\editor-data\index.php:23
filtercolibri_page_builder/customizer/preview_dataextend-builder\customizer\editor-data\index.php:38
filtercolibri_page_builder/customizer/preview_dataextend-builder\customizer\editor-data\index.php:56
filterextendbuilder_wp_dataextend-builder\customizer\editor-data\index.php:61
filterextendbuilder_wp_dataextend-builder\customizer\editor-data\index.php:67
filterextendbuilder_wp_dataextend-builder\customizer\editor-data\index.php:79
filterextendbuilder_wp_dataextend-builder\customizer\editor-data\index.php:84
filterextendbuilder_wp_dataextend-builder\customizer\editor-data\index.php:91
filterextendbuilder_wp_dataextend-builder\customizer\editor-data\index.php:106
filterextendbuilder_wp_dataextend-builder\customizer\editor-data\index.php:113
filterextendbuilder_wp_dataextend-builder\customizer\editor-data\index.php:141
filterextendbuilder_wp_dataextend-builder\customizer\editor-data\index.php:147
filterextendbuilder_wp_dataextend-builder\customizer\editor-data\index.php:154
filterextendbuilder_wp_dataextend-builder\customizer\editor-data\index.php:159
actionplugins_loadedextend-builder\customizer\editor-data\index.php:173
filterextendbuilder_wp_dataextend-builder\customizer\editor-data\index.php:174
filterextendbuilder_wp_dataextend-builder\customizer\editor-data\index.php:188
filterextendbuilder_wp_dataextend-builder\customizer\editor-data\index.php:210
actioncustomize_controls_print_scriptsextend-builder\customizer\editor-data\index.php:219
filterwp_save_post_revision_post_has_changedextend-builder\data\post-data.php:108
actioncolibri_page_builder/default_theme_dataextend-builder\extend-builder.php:105
filtercolibri_page_builder/plugin-activatedextend-builder\extend-builder.php:107
actionadmin_initextend-builder\extend-builder.php:115
actionadmin_noticesextend-builder\extend-builder.php:116
filteradd_post_metadataextend-builder\extend-builder.php:120
filterwp_update_attachment_metadataextend-builder\extend-builder.php:150
actioninitextend-builder\extend-builder.php:258
filterthe_contentextend-builder\extend-builder.php:268
filtercolibri_dynamic_contentextend-builder\extend-builder.php:269
actionadmin_initextend-builder\extend-builder.php:271
actioncolibri_importer_after_importextend-builder\extend-builder.php:275
filterwp_kses_allowed_htmlextend-builder\extend-builder.php:365
filterextendbuilder_wp_dataextend-builder\features\multiple-partials\filters.php:4
actioncolibri_page_builder/activatedextend-builder\filters\contact-form-sections-spacing.php:17
actioncolibri_page_builder/deactivatedextend-builder\filters\contact-form-sections-spacing.php:27
actionwp_headextend-builder\filters\contact-form-sections-spacing.php:37
filterwp_kses_allowed_htmlextend-builder\filters\extra-keses.php:40
filterwp_kses_allowed_htmlextend-builder\filters\svg-kses.php:82
filterextend_builder/google_fontsextend-builder\fonts.php:7
actionwp_enqueue_scriptsextend-builder\fonts.php:63
actionafter_setup_themeextend-builder\gutenberg.php:4
actionenqueue_block_editor_assetsextend-builder\gutenberg.php:25
filtercolibri_page_builder/import_all_partialsextend-builder\import.php:42
filtercolibri_page_builder/handled_partial_importextend-builder\import.php:51
filtercolibri_page_builder/import_file_valueextend-builder\import.php:85
actioninitextend-builder\import.php:129
actionjetpack_copy_postextend-builder\integrations\jetpack.php:5
filtersgo_html_minify_exclude_paramsextend-builder\integrations\sg-optimizer.php:6
filtercolibri_page_builder/customizer/preview_data/currentPageTypeextend-builder\integrations\woocommerce\filters.php:6
filtercolibri_page_builder/customizer/preview_data/currentPageIdextend-builder\integrations\woocommerce\filters.php:15
actionplugins_loadedextend-builder\integrations\woocommerce\filters.php:23
filtercolibri_page_builder/customizer/preview_dataextend-builder\integrations\woocommerce\filters.php:24
filtercolibri_show_page_contentextend-builder\integrations\woocommerce\filters.php:60
filtercolibri_page_builder/post_supports_partialextend-builder\integrations\woocommerce\filters.php:66
actionwp_footerextend-builder\integrations\woocommerce\filters.php:73
filtercolibri_page_builder/template/page_contentextend-builder\partials\output.php:33
actionsidebar_admin_setupextend-builder\partials\output.php:59
filterget_search_formextend-builder\partials\output.php:65
filterget_search_formextend-builder\partials\output.php:84
actionwp_headextend-builder\partials\output.php:153
filterwp_save_post_revision_post_has_changedextend-builder\partials\partials.php:156
actionadmin_enqueue_scriptsextend-builder\partials\regenerate.php:21
actionadmin_print_footer_scriptsextend-builder\partials\regenerate.php:22
actionwp_enqueue_scriptsextend-builder\partials\regenerate.php:24
actionprint_footer_scriptsextend-builder\partials\regenerate.php:25
actioninitextend-builder\partials\regenerate.php:206
actioninitextend-builder\register.php:19
actionwidgets_initextend-builder\register.php:72
actionpre_get_postsextend-builder\register.php:93
filterwp_revisions_to_keepextend-builder\save.php:5
action_wp_put_post_revisionextend-builder\save.php:24
actionwp_restore_post_revisionextend-builder\save.php:93
actioncolibri_page_builder/content_setting_updateextend-builder\save.php:430
filterdo_shortcode_tagextend-builder\shortcodes\base.php:23
filtercomments_templateextend-builder\shortcodes\blog\post-comment.php:34
filterdetermine_current_userextend-builder\shortcodes\blog\post-comment.php:70
filterexcerpt_lengthextend-builder\shortcodes\blog\post-item.php:250
filterget_the_excerptextend-builder\shortcodes\blog\post-item.php:253
filterthe_contentextend-builder\shortcodes\blog\post-item.php:264
filterthe_contentextend-builder\shortcodes\blog\post-item.php:272
filterthe_contentextend-builder\shortcodes\blog-posts.php:196
filterthe_contentextend-builder\shortcodes\blog-posts.php:242
filterexcerpt_lengthextend-builder\shortcodes\blog-posts.php:376
filterexcerpt_moreextend-builder\shortcodes\blog-posts.php:377
actionadmin_initextend-builder\shortcodes\filters.php:7
actioncolibri_page_builder/customizer/before_render_shortcodeextend-builder\shortcodes\forminator-filters.php:18
filteruse_default_gallery_styleextend-builder\shortcodes\gallery.php:103
filterpost_galleryextend-builder\shortcodes\gallery.php:107
filtercolibri_dynamic_contentextend-builder\shortcodes\general.php:118
filterthe_contentextend-builder\shortcodes\general.php:123
actioncolibri_after_dynamic_contentextend-builder\shortcodes\general.php:128
actioncustomize_registerextend-builder\shortcodes\menu-1.php:22
filterwp_nav_menu_objectsextend-builder\shortcodes\menu-1.php:34
filternav_menu_item_titleextend-builder\shortcodes\menu-1.php:92
filterwp_nav_menu_objectsextend-builder\shortcodes\menu-1.php:106
filterthe_titleextend-builder\shortcodes\menu-1.php:175
filterwp_nav_menu_itemsextend-builder\shortcodes\menu-1.php:203
filtercolibri_nomenu_afterextend-builder\shortcodes\menu-1.php:204
filtermc4wp_form_contentextend-builder\shortcodes\newsletter.php:21
actioncustomize_preview_initextend-builder\shortcodes\widget-area.php:9
actionwp_footerextend-builder\shortcodes\widget-area.php:11
actioncustomize_registerextend-builder\shortcodes\widget-area.php:29
actioncolibri_page_builder/customizer/before_render_shortcodeextend-builder\shortcodes\wpforms-filters.php:21
actioncolibri_page_builder/customizer/after_render_shortcodeextend-builder\shortcodes\wpforms-filters.php:39
actionadmin_initextend-builder\updates.php:152
actioncustomize_controls_print_footer_scriptsextend-builder\updates.php:189
actionwp_dashboard_setupextend-builder\updates.php:211
filtercustomize_save_responseextend-builder\utils.php:219
actionupdated_postmetaextend-builder\utils.php:228
actionwp_insert_postextend-builder\utils.php:229
actionadmin_noticesrecommendations\colibri-wp.php:11
actionadmin_footerrecommendations\colibri-wp.php:95
filterupgrader_package_optionsrecommendations\wpmu.php:65
actioncolibri_page_builder/customizer/managed_sectionsrecommendations\wpmu.php:536
filterextendbuilder_wp_datarecommendations\wpmu.php:546
actioncolibri_page_builder/readyrecommendations\wpmu.php:571
actioncustomize_registerrecommendations\wpmu.php:573
actionadmin_noticesrecommendations\wpmu.php:578
actionadmin_footerrecommendations\wpmu.php:654
filtercolibri_page_builder/plugin-activatedrecommendations\wpmu.php:693
actioncustomize_controls_print_scriptssrc\Customizer\Customizer.php:83
actioncustomize_controls_print_footer_scriptssrc\Customizer\Customizer.php:113
actionwp_footersrc\Customizer\Customizer.php:261
actioncustomize_registersrc\Customizer\Customizer.php:500
actioncustomize_controls_enqueue_scriptssrc\Customizer\Customizer.php:504
actioncustomize_preview_initsrc\Customizer\Customizer.php:508
filtercolibri_page_builder/customizer/global_datasrc\Customizer\Template.php:12
filterthe_contentsrc\Customizer\Template.php:14
filtertemplate_includesrc\Customizer\Template.php:16
filterextendthemes-ocdi/import_filessrc\DemoImport\DataApi.php:15
filterextendthemes-ocdi/plugin_page_setupsrc\DemoImport\DemoImport.php:36
filterextendthemes-ocdi/disable_pt_brandingsrc\DemoImport\DemoImport.php:37
filterextendthemes-ocdi/upload_file_pathsrc\DemoImport\DemoImport.php:39
actionextendthemes-ocdi/before_content_importsrc\DemoImport\Hooks\ImportContentHook.php:29
filterwxr_importer.pre_process.postsrc\DemoImport\Hooks\ImportContentHook.php:30
filterwxr_importer.pre_process.termsrc\DemoImport\Hooks\ImportContentHook.php:31
filterwp_import_post_data_processedsrc\DemoImport\Hooks\ImportContentHook.php:32
filterpre_update_option_active_pluginssrc\DemoImport\Hooks\ImportCustomizerHook.php:19
actionextendthemes-ocdi/after_importsrc\DemoImport\Hooks\ImportHook.php:38
filterwxr_importer.pre_process.postsrc\DemoImport\Hooks\PreparationHook.php:25
actionextendthemes-ocdi/before_content_import_executionsrc\DemoImport\Hooks\PreparationHook.php:34
actionextendthemes-ocdi/before_content_import_executionsrc\DemoImport\Hooks\PreparationHook.php:35
actionextendthemes-ocdi/after_all_import_executionsrc\DemoImport\Hooks\PreparationHook.php:36
filterextendthemes-ocdi/time_for_one_ajax_callsrc\DemoImport\Hooks\PreparationHook.php:140
actionplugins_loadedsrc\GoogleFontsLocalLoader.php:430
actionadmin_noticessrc\License\ActivationForm.php:18
filtercolibri_page_builder/companion/update_remote_datasrc\License\ActivationForm.php:385
actionadmin_noticessrc\License\CheckForm.php:15
actionadmin_initsrc\License\License.php:54
filtercolibri_page_builder/companion/update_remote_datasrc\License\License.php:57
filtercolibri_page_builder/custom_update_endpointsrc\License\License.php:60
filterplugins_apisrc\License\Updater.php:25
actionadmin_headsrc\LoadingScreen.php:125
actionwp_headsrc\LoadingScreen.php:126
actionadmin_headsrc\LoadingScreen.php:140
actionwp_headsrc\LoadingScreen.php:141
actionadmin_noticessrc\Notify\Notification.php:66
filterhttp_request_timeoutsrc\Notify\NotificationsManager.php:27
actionadmin_headsrc\Notify\NotificationsManager.php:116
actionadmin_footersrc\Notify\NotificationsManager.php:147
actionextendthemes-ocdi/before_content_import_executionsrc\OCDI\ImportActions.php:17
actionextendthemes-ocdi/after_content_import_executionsrc\OCDI\ImportActions.php:23
actionextendthemes-ocdi/after_content_import_executionsrc\OCDI\ImportActions.php:27
actionextendthemes-ocdi/after_content_import_executionsrc\OCDI\ImportActions.php:28
actionextendthemes-ocdi/customizer_import_executionsrc\OCDI\ImportActions.php:31
actionextendthemes-ocdi/after_all_import_executionsrc\OCDI\ImportActions.php:34
actionextendthemes-ocdi/widget_settings_arraysrc\OCDI\ImportActions.php:38
filterwxr_importer.pre_process.usersrc\OCDI\Importer.php:101
filterwxr_importer.pre_process.postsrc\OCDI\Importer.php:104
filterintermediate_image_sizes_advancedsrc\OCDI\Importer.php:108
actionhttp_api_curlsrc\OCDI\Importer.php:129
actionadmin_menusrc\OCDI\OneClickDemoImport.php:86
actionafter_setup_themesrc\OCDI\OneClickDemoImport.php:97
actionplugins_loadedsrc\OCDI\OneClickDemoImport.php:98
actionhttp_api_curlsrc\OCDI\OneClickDemoImport.php:211
filterextendthemes-ocdi/time_for_one_ajax_callsrc\OCDI\WPCLICommands.php:215
filterwxr_importer.pre_process.termsrc\OCDI\WXRImporter.php:28
actionafter_setup_themesrc\PageBuilder.php:61
actionadmin_bar_menusrc\PageBuilder.php:189
filterpage_row_actionssrc\PageBuilder.php:295
actionadmin_footersrc\PageBuilder.php:297
actionmedia_buttonssrc\PageBuilder.php:299
filteris_protected_metasrc\PageBuilder.php:301
filtercustomize_changeset_save_datasrc\PageBuilder.php:303
filteruser_can_richeditsrc\PageBuilder.php:306
filtergutenberg_can_edit_post_typesrc\PageBuilder.php:307
filteruse_block_editor_for_postsrc\PageBuilder.php:308
filterwp_editor_settingssrc\PageBuilder.php:309
filterthe_editorsrc\PageBuilder.php:310
actionwp_headsrc\PageBuilder.php:312
actionsave_postsrc\PageBuilder.php:423
actionwp_restore_post_revisionsrc\PageBuilder.php:424
filtermesmerize_is_shortcode_refreshsrc\PageBuilder.php:1454
filterwp_resource_hintssrc\PageBuilder.php:1512
actionadmin_initsupport\wp-5.8.php:28
actioncolibri_page_builder/activatedsupport\wp-5.8.php:30
actioncolibri_page_builder/activatedutils\functions.php:5
filtercolibri_page_builder/license_datautils\functions.php:46
actioncustomize_registerutils\functions.php:59
actionadmin_headutils\notifications.php:61
actionafter_switch_themeutils\survey.php:4
actionadmin_print_footer_scriptsutils\survey.php:25
actionwp_enqueue_scriptsutils\survey.php:27
Maintenance & Trust

Colibri Page Builder Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedDec 17, 2025
PHP min version
Downloads3.8M

Community Trust

Rating88/100
Number of ratings75
Active installs90K
Alternatives

Colibri Page Builder Alternatives

Elementor Website Builder – More Than Just a Page Builder

Elementor Website Builder – More Than Just a Page Builder

elementor

A
88

The Elementor Website Builder has it all: drag and drop page builder, pixel perfect design, mobile responsive editing, and more. Get started now!

10.0M 45 CVEs
Page Builder: Pagelayer – Drag and Drop website builder

Page Builder: Pagelayer – Drag and Drop website builder

pagelayer

A
88

The most advanced frontend drag & drop page builder. Pagelayer is a light weight but extremely powerful Website Builder.

400K 25 CVEs
Beaver Builder Page Builder – Drag and Drop Website Builder

Beaver Builder Page Builder – Drag and Drop Website Builder

beaver-builder-lite-version

A
89

The Professional's Choice for Drag & Drop WordPress Page Building. Fast, Reliable, and Trusted since 2014.

100K 31 CVEs
TemplateSpare – 1000+ WordPress Starter Templates & Full Site Migration Tool | 1-Click Import/Export & No-Code Builder

TemplateSpare – 1000+ WordPress Starter Templates & Full Site Migration Tool | 1-Click Import/Export & No-Code Builder

templatespare

A
99

Imagine this... You’re planning your new website. You’re excited at first—but then reality hits. The design takes months. You wait for the developer t &hellip;

10K 1 CVE
SKT Page Builder

SKT Page Builder

skt-builder

A
96

SKT Page Builder has been designed and developed to assist anyone in creating pages using a drag and drop page builder interface.

2K 3 CVEs
Developer Profile

Colibri Page Builder Developer Profile

Extend Themes

59 plugins · 429K total installs

78
trust score
Avg Security Score
99/100
Avg Patch Time
95 days
View full developer profile
Detection Fingerprints

How We Detect Colibri Page Builder

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/colibri-page-builder/assets/css/common.css/wp-content/plugins/colibri-page-builder/assets/css/page-builder.css/wp-content/plugins/colibri-page-builder/assets/js/page-builder.js/wp-content/plugins/colibri-page-builder/assets/js/colibri-page-builder-init.js/wp-content/plugins/colibri-page-builder/assets/css/page-builder-frontend.css/wp-content/plugins/colibri-page-builder/assets/js/page-builder-frontend.js/wp-content/plugins/colibri-page-builder/assets/css/bootstrap.css/wp-content/plugins/colibri-page-builder/assets/css/element-editor.css+1 more
Script Paths
/wp-content/plugins/colibri-page-builder/assets/js/page-builder.js/wp-content/plugins/colibri-page-builder/assets/js/colibri-page-builder-init.js/wp-content/plugins/colibri-page-builder/assets/js/page-builder-frontend.js/wp-content/plugins/colibri-page-builder/assets/js/element-editor.js
Version Parameters
colibri-page-builder/assets/css/common.css?ver=colibri-page-builder/assets/css/page-builder.css?ver=colibri-page-builder/assets/js/page-builder.js?ver=colibri-page-builder/assets/js/colibri-page-builder-init.js?ver=colibri-page-builder/assets/css/page-builder-frontend.css?ver=colibri-page-builder/assets/js/page-builder-frontend.js?ver=colibri-page-builder/assets/css/bootstrap.css?ver=colibri-page-builder/assets/css/element-editor.css?ver=colibri-page-builder/assets/js/element-editor.js?ver=

HTML / DOM Fingerprints

CSS Classes
colibri-page-buildercolibri-page-builder-frontendcolibri-sectioncolibri-rowcolibri-columncolibri-blockcolibri-builder-body
HTML Comments
<!-- colibri-page-builder --><!-- colibri-page-builder-frontend -->
Data Attributes
data-colibri-iddata-colibri-componentdata-colibri-containerdata-colibri-type
JS Globals
colibriPageBuilderColibriPageBuilderEditorColibriPageBuilderFrontendcolibriData
REST Endpoints
/wp-json/colibri-page-builder/v1/settings/wp-json/colibri-page-builder/v1/content/wp-json/colibri-page-builder/v1/template
Shortcode Output
<div class="colibri-section"><div class="colibri-row"><div class="colibri-column"><div class="colibri-block">
FAQ

Frequently Asked Questions about Colibri Page Builder