Extend Themes vulnerabilities
We track 2 vulnerabilities in Extend Themes products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 9, 2026.
2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score
Latest Extend Themes vulnerabilities
- 7.1 High severity
Kubio AI Page Builder: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Kubio AI Page Builder kubio allows Reflected XSS.This issue affects Kubio AI Page Builder: from n/a through 2.9.3.
- 7.5 High severity
Lead Generation Contact Widget & AI…: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Unauthenticated Sensitive Data Exposure in Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads <= 1.2.0 versions.