CVE-2026-14472

Kubio AI Page Builder for WordPress (≤ 2.8.4 ) contains a Stored XSS in the kubio/copyright block content. The root cause is that entity-encoded script tags are treated as inert text by WordPress core's kses filter and the plugin's own wp_kses_post() call, but are then decoded into live HTML by a...