CVE-2025-2294

CVE-2025-4403 Exploit Details Published : March 27, 2025 Updated : March 28, 2025 Severity : Critical CVSS Score: 9.8 CWE : CWE-22: CWE-22 Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' Affected Versions : All versions from n/a through 2.5.1 Researcher :...

CVE-2025-2294

🚨 Kubio AI Page Builder = 2.5.1 - Inclusión de Archivos Local no Autenticada 📝 Descripción El plugin Kubio AI Page Builder para WordPress es vulnerable a la Inclusión de Archivos Local LFI en todas las versiones hasta la 2.5.1 incluida, a través de la función kubiohybridthemeloadtemplate. Esto...

CVE-2025-2294

CVE-2025-2294 - WordPress Kubio AI Page Builder = 2.5.1 - Local File Inclusion LFI Exploit Overview CVE-2025-2294 affects the Kubio AI Page Builder plugin for WordPress versions up to and including 2.5.1. It suffers from an unauthenticated Local File Inclusion LFI vulnerability via the...

cve-2025-22294

CVE-2025-2294 – Local File Inclusion LFI en el plugin de WordPress Kubio AI Page Builder Enlace al write-up detallado Enlace al deploy Enlace al exploit Enlace a archivos para verificación masiva: Plantilla para verificación activa Plantilla para verificación pasiva Exploit para verificación masi...

Kubio AI Page Builder <= 2.5.1 - Local File Inclusion

The Kubio AI Page Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.5.1 via thekubiohybridthemeloadtemplate function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the...

CVE-2026-14472

The Kubio AI Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via kubio/copyright Block Content in all versions up to, and including, 2.8.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-14472 Kubio AI Page Builder <= 2.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via kubio/copyright Block Content

The Kubio AI Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via kubio/copyright Block Content in all versions up to, and including, 2.8.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-14472 Kubio AI Page Builder <= 2.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via kubio/copyright Block Content

The Kubio AI Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via kubio/copyright Block Content in all versions up to, and including, 2.8.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

EUVD-2026-82755

The Kubio AI Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via kubio/copyright Block Content in all versions up to, and including, 2.8.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-14472

Kubio AI Page Builder for WordPress (≤ 2.8.4 ) contains a Stored XSS in the kubio/copyright block content. The root cause is that entity-encoded script tags are treated as inert text by WordPress core's kses filter and the plugin's own wp_kses_post() call, but are then decoded into live HTML by a...

CVE-2026-14472: Improper Neutralization of Input During Web Page Generation

The Kubio AI Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via kubio/copyright Block Content in all versions up to, and including, 2.8.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

WordPress Kubio AI Page Builder plugin <= 2.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Kubio AI Page Builder versions = 2.8.4...

CVE-2026-83492

Improper input validation vulnerability in Extend Themes Kubio AI Website Builder. This issue affects Kubio AI Website Builder: before 2.9.1...

CVE-2026-83492 WordPress Kubio AI Website Builder - Denial Of Service

Improper input validation vulnerability in Extend Themes Kubio AI Website Builder. This issue affects Kubio AI Website Builder: before 2.9.1...

CVE-2026-83492

Extend Themes Kubio AI Website Builder (a WordPress plugin) is affected by an improper input validation vulnerability in versions prior to 2.9.1 . The flaw allows a high-privilege attacker to trigger a denial of service condition over the network with low complexity and no user interaction, resul...

CVE-2026-83492 WordPress Kubio AI Website Builder - Denial Of Service

Improper input validation vulnerability in Extend Themes Kubio AI Website Builder. This issue affects Kubio AI Website Builder: before 2.9.1...

EUVD-2026-68616

Improper input validation vulnerability in Extend Themes Kubio AI Website Builder. This issue affects Kubio AI Website Builder: before 2.9.1...

PT-2026-83896

Improper input validation vulnerability in Extend Themes Kubio AI Website Builder. This issue affects Kubio AI Website Builder: before 2.9.1...

CVE-2026-83492: Improper Input Validation

Improper input validation vulnerability in Extend Themes Kubio AI Website Builder. This issue affects Kubio AI Website Builder: before 2.9.1...

CVE-2026-16779

The Kubio AI Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.8.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with...