Security
فارسی
All products

kubio

WordPress · Plugin
14 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Kubio AI Page Builder <= 2.9.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via kubio/shortcode Block via Product ReviewCVE-2026-115816 kubio WordPress Medium Fix reported
Kubio AI Page Builder <= 2.9.3 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-94167 kubio WordPress High Fix reported
Kubio AI Page Builder <= 2.9.2 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-88783 kubio WordPress High Fix reported
Kubio AI Page Builder <= 2.9.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-88782 kubio WordPress Medium Fix reported
Kubio AI Page Builder <= 2.9.2 - Unauthenticated Stored Cross-Site Scripting via SVG Comment Content (KSES Allowlist Bypass)CVE-2026-100107 kubio WordPress High Fix reported
Kubio AI Page Builder <= 2.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via kubio/copyright Block ContentCVE-2026-14472 kubio WordPress Medium Fix reported
Kubio AI Website Builder < 2.9.1 - Authenticated (Admin+) Denial of ServiceCVE-2026-83492 kubio WordPress Medium Fix reported
Kubio AI Page Builder <= 2.8.5 - Missing Authorization to Authenticated (Contributor+) Front-Page/Menu/Template Configuration Reversion via kubio_restore_front_page AJAX ActionCVE-2026-16779 kubio WordPress Medium Fix reported
Kubio AI Page Builder <= 2.7.2 - Missing Authorization to Authenticated (Contributor+) Limited File Upload via Kubio Block AttributesCVE-2026-5427 kubio WordPress Medium Fix reported
Kubio AI Page Builder <= 2.7.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-34887 kubio WordPress Medium Fix reported
Kubio AI Page Builder <= 2.6.3 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin InstallationCVE-2025-8487 kubio WordPress Medium Fix reported
Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File InclusionCVE-2025-2294 kubio WordPress Critical Fix reported
Kubio AI Page Builder <= 2.3.5 - Reflected Cross-Site ScriptingCVE-2024-13516 kubio WordPress Medium Fix reported
Kubio AI Page Builder <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-39661 kubio WordPress Medium Fix reported