CVE-2025-2294

Kubio Page Builder LFI Exploit CVE-2025-2294 Exploit de Inclusión Local de Archivos LFI para el plugin de WordPress Kubio Page Builder versiones ≤ 2.5.1. 📌 Descripción Esta herramienta explota una vulnerabilidad LFI no autenticada en el plugin Kubio Page Builder CVE-2025-2294, permitiendo a los...

CVE-2025-2294

🚨 Kubio AI Page Builder = 2.5.1 - Inclusión de archivos locales no autenticada 📝 Descripción El complemento Kubio AI Page Builder para WordPress es vulnerable a la inclusión de archivos locales en todas las versiones hasta la 2.5.1 incluida, a través de la función kubiohybridthemeloadtemplate. Es...

CVE-2025-2294

CVE-2025-2294 🚨 CVE-2025-2294 - WordPress 的 Kubio AI 页面构建器中的本地文件包含（LFI）漏洞 🧱 🔍 概述 CVE-2025-2294 是一个严重的 🔥 本地文件包含（LFI）漏洞，影响 WordPress 的 Kubio AI 页面构建器插件（版本 2.5.1 及以下）。该漏洞允许未经认证的远程攻击者 👾 通过 kubio-site-edit-iframe-classic-template URL 参数包含服务器上的任意文件。 利用此漏洞可能导致敏感文件泄露 📂、远程代码执行 💥 以及完全系统入侵 💀。 👤 作者 Muhammad...

CVE-2026-16779

The Kubio AI Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.8.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with...

Exploit for CVE-2025-2294

🚨 Kubio AI Page Builder = 2.5.1 - Unauthenticated Local File...

CVE-2024-39661

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ExtendThemes Kubio AI Page Builder.This issue affects Kubio AI Page Builder: from n/a through 2.2.4...

Exploit for CVE-2025-2294

Kubio Page Builder LFI Exploit CVE-2025-2294 !Pythonhttp...

PT-2025-13432

Name of the Vulnerable Software and Affected Versions Kubio AI Page Builder for WordPress versions through 2.5.1 Description The Kubio AI Page Builder plugin for WordPress is susceptible to a Local File Inclusion issue via the kubio hybrid theme load template function. This allows unauthenticated...

VulnCheck KEV: CVE-2025-2294

The Kubio AI Page Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.5.1 via thekubiohybridthemeloadtemplate function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the...

WordPress Kubio AI Page Builder plugin <= 2.3.5 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Stefan Bogdanovic in WordPress Plugin Kubio AI Page Builder versions = 2.3.5...