What’s Vulnerable › Products

extendthemes Kubio AI Page Builder vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your extendthemes Kubio AI Page Builder version is affected

Latest extendthemes Kubio AI Page Builder vulnerabilities

• CVE-2026-94167 — WordPress Kubio AI Page Builder plugin <= 2.9.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-100107 — Kubio AI Page Builder <= 2.9.2 - Unauthenticated Stored Cross-Site Scripting via SVG Comment Content (KSES Allowlist Bypass) (CVSS 7.2)
• CVE-2026-14472 — Kubio AI Page Builder <= 2.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via kubio/copyright Block Content (CVSS 6.4)
• CVE-2026-16779 — Kubio AI Page Builder <= 2.8.5 - Missing Authorization to Authenticated (Contributor+) Front-Page/Menu/Template Configuration Reversion via kubio_restore_front_page AJAX Action (CVSS 4.3)
• CVE-2026-5427 — Kubio AI Page Builder <= 2.7.2 - Missing Authorization to Authenticated (Contributor+) Limited File Upload via Kubio Block Attributes (CVSS 5.3)
• CVE-2026-34887 — WordPress Kubio AI Page Builder plugin <= 2.7.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2025-8487 — Kubio AI Page Builder <= 2.6.3 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation (CVSS 5.4)
• CVE-2025-2294 — Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion (CVSS 9.8)
• CVE-2024-13516 — Kubio AI Page Builder <= 2.3.5 - Reflected Cross-Site Scripting (CVSS 6.1)
• CVE-2024-39661 — WordPress Kubio AI Page Builder plugin <= 2.2.4 - Authenticated Cross Site Scripting (XSS) vulnerability (CVSS 6.5)