KA
Product
Kubio AI Page Builder
by extendthemes · last CVE Oct 2, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 1Medium 6Low 0
Watch

Add Kubio AI Page Builder to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-2294
9.8
78%
Mar 28
Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion
Affected: through 2.5.1
CVE-2026-100107
7.2
0%
Oct 2
Kubio AI Page Builder <= 2.9.2 - Unauthenticated Stored Cross-Site Scripting via SVG Comment Content (KSES Allowlist Bypass)
Affected: through 2.9.2
CVE-2024-39661
6.5
0%
Aug 1
WordPress Kubio AI Page Builder plugin <= 2.2.4 - Authenticated Cross Site Scripting (XSS) vulnerability
Affected: through 2.2.4
CVE-2026-14472
6.4
0%
Sep 18
Kubio AI Page Builder <= 2.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via kubio/copyright Block Content
Affected: through 2.8.4
CVE-2024-13516
6.1
0%
Jan 18
Kubio AI Page Builder <= 2.3.5 - Reflected Cross-Site Scripting
Affected: through 2.3.5
CVE-2025-8487
5.4
0%
Sep 19
Kubio AI Page Builder <= 2.6.3 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation
Affected: through 2.6.3
CVE-2026-5427
5.3
1%
Apr 17
Kubio AI Page Builder <= 2.7.2 - Missing Authorization to Authenticated (Contributor+) Limited File Upload via Kubio Block Attributes
Affected: through 2.7.2
CVE-2026-16779
4.3
0%
Aug 16
Kubio AI Page Builder <= 2.8.5 - Missing Authorization to Authenticated (Contributor+) Front-Page/Menu/Template Configuration Reversion via kubio_restore_front_page AJAX Action
Affected: through 2.8.5
Showing 8