Skip to contentExtendthemes Kubio Ai Page Builder vulnerabilities
- extendthemes kubio ai page builderKubio AI Page Builder <= 2.9.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via kubio/shortcode Block via Product ReviewCVE-2026-1158166.4 Medium
- extend themes kubio ai page builderWordPress Kubio AI Page Builder plugin <= 2.9.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-941677.1 High
- extendthemes kubio ai page builderKubio AI Page Builder < 2.9.3 - Unauthenticated Stored XSS via Comment ContentCVE-2026-887838.8 High
- extendthemes kubio ai page builderKubio AI Page Builder < 2.9.3 - Contributor+ Stored XSS via Image Gallery Item URL AttributeCVE-2026-887826.8 Medium
- extendthemes kubio ai page builderKubio AI Page Builder <= 2.9.2 - Unauthenticated Stored Cross-Site Scripting via SVG Comment Content (KSES Allowlist Bypass)CVE-2026-1001077.2 High
- extendthemes kubio ai page builderKubio AI Page Builder <= 2.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via kubio/copyright Block ContentCVE-2026-144726.4 Medium
- extendthemes kubio ai page builderKubio AI Page Builder <= 2.8.5 - Missing Authorization to Authenticated (Contributor+) Front-Page/Menu/Template Configuration Reversion via kubio_restore_front_page AJAX ActionCVE-2026-167794.3 Medium
- extendthemes kubio ai page builderKubio AI Page Builder <= 2.7.2 - Missing Authorization to Authenticated (Contributor+) Limited File Upload via Kubio Block AttributesCVE-2026-54275.3 Medium
- extend themes kubio ai page builderWordPress Kubio AI Page Builder plugin <= 2.7.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-348876.5 Medium
- extendthemes kubio ai page builderKubio AI Page Builder <= 2.6.3 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin InstallationCVE-2025-84875.4 Medium
- extendthemes kubio ai page builderKubio AI Page Builder <= 2.5.1 - Unauthenticated Local File InclusionCVE-2025-2294Public exploitEPSS 78.4%9.8 Critical
- extendthemes kubio ai page builderKubio AI Page Builder <= 2.3.5 - Reflected Cross-Site ScriptingCVE-2024-135166.1 Medium
- extendthemes kubio ai page builderWordPress Kubio AI Page Builder plugin <= 2.2.4 - Authenticated Cross Site Scripting (XSS) vulnerabilityCVE-2024-396616.5 Medium