CVE-2025-2294

Kubio Page Builder LFI Exploit CVE-2025-2294 Exploit di Local File Inclusion LFI per il plugin WordPress Kubio Page Builder versioni ≤ 2.5.1. 📌 Descrizione Questo strumento sfrutta una vulnerabilità LFI non autenticata nel plugin Kubio Page Builder CVE-2025-2294, consentendo agli attaccanti di...

CVE-2025-2294

CVE-2025-2294 🚨 CVE-2025-2294 - Local File Inclusion LFI भेद्यता Kubio AI Page Builder for WordPress में 🧱 🔍 अवलोकन CVE-2025-2294 एक गंभीर 🔥 स्थानीय फ़ाइल समावेशन LFI भेद्यता है जो WordPress के लिए Kubio AI Page Builder प्लगइन संस्करण 2.5.1 तक और सहित को प्रभावित करती है। यह दोष अनधिकृत दूरस्थ...

CVE-2025-2294

CVE-2025-2294 परिचय CVE-2025-2294 — WordPress के लिए Kubio AI Page Builder प्लगइन में Local File Inclusion LFI प्रकार की एक गंभीर भेद्यता है। यह भेद्यता अप्रमाणित unauthenticated दूरस्थ हमलावर को एक विशेष रूप से तैयार पैरामीटर भेजने की अनुमति देती है, जिससे प्लगइन सर्वर पर किसी मनमानी फ़ाइल को...

CVE-2025-2294

CVE-2025-2294 kubio-cve-2025-2294active.yaml - في القالب تم تنفيذ فحص يسمح بالتحقق من وجود الثغرة عبر الاستغلال. kubio-cve-2025-2294passive.yaml - في القالب تم تنفيذ فحص بناءً على إصدار البرنامج الذي تم الحصول عليه. scanner.py - سكربت يسمح بالتحقق من وجود الثغرة عبر الاستغلال...

cve-2025-22294

CVE-2025-2294 – Local File Inclusion LFI no plugin WordPress Kubio AI Page Builder Link para o write-up detalhado Link para o deploy Link para o exploit Links para arquivos de verificação em massa: Modelo para verificação ativa Modelo para verificação passiva...

CVE-2025-2294

🚨 Kubio AI Page Builder = 2.5.1 - Inclusione Locale di File Non Autenticata 📝 Descrizione Il plugin Kubio AI Page Builder per WordPress è vulnerabile all'Inclusione Locale di File in tutte le versioni fino alla 2.5.1 inclusa tramite la funzione kubiohybridthemeloadtemplate. Ciò rende possibile ad...

Kubio AI Page Builder <= 2.5.1 - Local File Inclusion

The Kubio AI Page Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.5.1 via thekubiohybridthemeloadtemplate function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the...

CVE-2025-2294

CVE-2025-2294 - WordPress Kubio AI Page Builder = 2.5.1 - Exploit per Inclusione Locale di File LFI Panoramica CVE-2025-2294 riguarda il plugin Kubio AI Page Builder per WordPress versioni fino alla 2.5.1 inclusa. Soffre di una vulnerabilità Local File Inclusion LFI non autenticata tramite la...

CVE-2025-2294

Exploit CVE-2025-4403 Dettagli Pubblicato : 27 marzo 2025 Aggiornato : 28 marzo 2025 Gravità : Critico Punteggio CVSS: 9.8 CWE : CWE-22: Limitazione impropria del percorso di un nome di file a una directory ristretta 'Path Traversal' Versioni interessate : Tutte le versioni dalla n/a fino alla...

CVE-2025-2294

🚨 Kubio AI Page Builder = 2.5.1 - Nicht authentifizierte lokale Dateieinbindung 📝 Beschreibung Das Kubio AI Page Builder-Plugin für WordPress ist in allen Versionen bis einschließlich 2.5.1 anfällig für lokale Dateieinbindung über die Funktion kubiohybridthemeloadtemplate. Dadurch können nicht...

CVE-2026-16779

The Kubio AI Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.8.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with...

CVE-2026-16779 Kubio AI Page Builder <= 2.8.5 - Missing Authorization to Authenticated (Contributor+) Front-Page/Menu/Template Configuration Reversion via kubio_restore_front_page AJAX Action

The Kubio AI Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.8.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with...

EUVD-2026-59869

The Kubio AI Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.8.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with...

CVE-2026-16779

The Kubio AI Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.8.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with...

CVE-2026-16779

Kubio AI Page Builder for WordPress (≤ v2.8.5) is vulnerable to an authorization bypass via the kubio_restore_front_page AJAX action. Authenticated attackers with contributor+ access can overwrite front-page configuration (show_on_front, page_on_front, page_for_posts), rewrite primary navigation ...

PT-2026-73097

The Kubio AI Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.8.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with...

CVE-2026-5427

The Kubio plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to and including 2.7.2. This is due to insufficient capability checks in the kubiorestpreinsertimportassets function, which is hooked to the restpreinsertposttype filter for posts, pages, templates, and template...

EUVD-2026-23358

The Kubio plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to and including 2.7.2. This is due to insufficient capability checks in the kubiorestpreinsertimportassets function, which is hooked to the restpreinsertposttype filter for posts, pages, templates, and template...

CVE-2026-5427

The Kubio plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to and including 2.7.2. This is due to insufficient capability checks in the kubiorestpreinsertimportassets function, which is hooked to the restpreinsertposttype filter for posts, pages, templates, and template...

CVE-2026-5427 Kubio AI Page Builder <= 2.7.2 - Missing Authorization to Authenticated (Contributor+) Limited File Upload via Kubio Block Attributes

The Kubio plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to and including 2.7.2. This is due to insufficient capability checks in the kubiorestpreinsertimportassets function, which is hooked to the restpreinsertposttype filter for posts, pages, templates, and template...