CVE-2025-2294

استغلال ثغرة LFI في Kubio Page Builder CVE-2025-2294 أداة استغلال لتضمين الملفات المحلية LFI في إضافة Kubio Page Builder لـ WordPress الإصدارات ≤ 2.5.1. 📌 الوصف تستغل هذه الأداة ثغرة LFI غير مصادق عليها في إضافة Kubio Page Builder CVE-2025-2294، مما يسمح للمهاجمين بقراءة الملفات الحساسة في تثبيتا...

cve-2025-22294

CVE-2025-2294 – Local File Inclusion LFI في إضافة WordPress Kubio AI Page Builder رابط إلى write-up مفصّل رابط إلى النشر رابط إلى exploit رابط إلى الملفات، للفحص الجماعي: قالب للفحص النشط...

CVE-2025-2294

استغلال CVE-2025-4403 التفاصيل تاريخ النشر : 27 مارس 2025 آخر تحديث : 28 مارس 2025 الخطورة : حرجة درجة CVSS: 9.8 CWE : CWE-22: CWE-22 تقييد غير سليم لاسم المسار إلى دليل مقيد 'اجتياز المسار' الإصدارات المتأثرة : جميع الإصدارات من n/a حتى 2.5.1 الباحث :...

Kubio AI Page Builder <= 2.5.1 - Local File Inclusion

The Kubio AI Page Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.5.1 via thekubiohybridthemeloadtemplate function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the...

CVE-2025-2294

CVE-2025-2294 kubio-cve-2025-2294active.yaml - le modèle implémente une vérification permettant de détecter la présence de la vulnérabilité par exploitation. kubio-cve-2025-2294passive.yaml - le modèle implémente une vérification basée sur la version du logiciel obtenue. scanner.py - script...

CVE-2025-2294

🚨 Kubio AI Page Builder = 2.5.1 - Неавторизованное включение локальных файлов 📝 Описание Плагин Kubio AI Page Builder для WordPress уязвим к включению локальных файлов во всех версиях до 2.5.1 включительно через функцию kubiohybridthemeloadtemplate. Это позволяет неавторизованным злоумышленникам...

CVE-2025-2294

CVE-2025-2294 Introduction CVE-2025-2294 est une vulnérabilité critique de type Local File Inclusion LFI dans le plugin Kubio AI Page Builder pour WordPress. Cette vulnérabilité permet à un attaquant distant non authentifié de transmettre un paramètre spécialement conçu, ce qui amène le plugin à...

CVE-2025-2294

🚨 Kubio AI Page Builder = 2.5.1 - إدراج الملفات المحلي غير المصادق عليه 📝 الوصف إضافة Kubio AI Page Builder لـ WordPress معرضة لثغرة إدراج الملفات المحلي في جميع الإصدارات حتى 2.5.1 وما يشملها عبر دالة kubiohybridthemeloadtemplate. وهذا يتيح للمهاجمين غير المصادقين إدراج وتنفيذ ملفات عشوائية على...

CVE-2026-83492

Extend Themes Kubio AI Website Builder (a WordPress plugin) is affected by an improper input validation vulnerability in versions prior to 2.9.1 . The flaw allows a high-privilege attacker to trigger a denial of service condition over the network with low complexity and no user interaction, resul...

EUVD-2026-68616

Improper input validation vulnerability in Extend Themes Kubio AI Website Builder. This issue affects Kubio AI Website Builder: before 2.9.1...

CVE-2025-2294

CVE-2025-2294 - WordPress Kubio AI Page Builder = 2.5.1 - Exploit d'inclusion locale de fichiers LFI Vue d'ensemble CVE-2025-2294 affecte le plugin Kubio AI Page Builder pour WordPress versions jusqu'à 2.5.1 incluse. Il souffre d'une vulnérabilité d'inclusion locale de fichiers LFI non authentifi...

CVE-2025-2294

CVE-2025-2294 🚨 CVE-2025-2294 - Local File Inclusion LFI भेद्यता Kubio AI Page Builder for WordPress में 🧱 🔍 अवलोकन CVE-2025-2294 एक गंभीर 🔥 स्थानीय फ़ाइल समावेशन LFI भेद्यता है जो WordPress के लिए Kubio AI Page Builder प्लगइन संस्करण 2.5.1 तक और सहित को प्रभावित करती है। यह दोष अनधिकृत दूरस्थ...

CVE-2026-16779

The Kubio AI Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.8.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with...

CVE-2026-16779 Kubio AI Page Builder <= 2.8.5 - Missing Authorization to Authenticated (Contributor+) Front-Page/Menu/Template Configuration Reversion via kubio_restore_front_page AJAX Action

The Kubio AI Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.8.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with...

EUVD-2026-59869

The Kubio AI Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.8.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with...

CVE-2026-16779

The Kubio AI Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.8.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with...

CVE-2026-16779

Kubio AI Page Builder for WordPress (≤ v2.8.5) is vulnerable to an authorization bypass via the kubio_restore_front_page AJAX action. Authenticated attackers with contributor+ access can overwrite front-page configuration (show_on_front, page_on_front, page_for_posts), rewrite primary navigation ...

PT-2026-73097

The Kubio AI Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.8.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with...

CVE-2026-5427

The Kubio plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to and including 2.7.2. This is due to insufficient capability checks in the kubiorestpreinsertimportassets function, which is hooked to the restpreinsertposttype filter for posts, pages, templates, and template...

EUVD-2026-23358

The Kubio plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to and including 2.7.2. This is due to insufficient capability checks in the kubiorestpreinsertimportassets function, which is hooked to the restpreinsertposttype filter for posts, pages, templates, and template...