Kubio AI Page Builder vulnerabilities

2 known vulnerabilities in Kubio AI Page Builder from ExtendThemes. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Kubio AI Page Builder: Improper Neutralization of Input During Web Page Generation

  CVE-2026-100107Oct 2, 2026ExtendThemes

  The Kubio AI Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 2.9.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthent

• 9.8 Critical severity

  Kubio AI Page Builder: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-2294Mar 28, 2025ExtendThemesEPSS 78.4%

  The Kubio AI Page Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.5.1 via thekubio_hybrid_theme_load_template function. This makes it possible for unauthenticated attackers to include and execute arbit