CVE-2026-16779

The Kubio AI Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.8.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with...

Exploit for CVE-2025-2294

🚨 Kubio AI Page Builder = 2.5.1 - Unauthenticated Local File...

CVE-2024-39661

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ExtendThemes Kubio AI Page Builder.This issue affects Kubio AI Page Builder: from n/a through 2.2.4...

Exploit for CVE-2025-2294

Kubio Page Builder LFI Exploit CVE-2025-2294 !Pythonhttp...

PT-2025-13432

Name of the Vulnerable Software and Affected Versions Kubio AI Page Builder for WordPress versions through 2.5.1 Description The Kubio AI Page Builder plugin for WordPress is susceptible to a Local File Inclusion issue via the kubio hybrid theme load template function. This allows unauthenticated...

VulnCheck KEV: CVE-2025-2294

The Kubio AI Page Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.5.1 via thekubiohybridthemeloadtemplate function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing...

WordPress Kubio AI Page Builder plugin <= 2.3.5 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Stefan Bogdanovic in WordPress Plugin Kubio AI Page Builder versions = 2.3.5...