ExtendThemes Kubio AI Page Builder

• CVE-2026-115816 Medium 6.4 Kubio AI Page Builder <= 2.9.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via kubio/shortcode Block via Product Review –
• CVE-2026-100107 High 7.2 Kubio AI Page Builder <= 2.9.2 - Unauthenticated Stored Cross-Site Scripting via SVG Comment Content (KSES Allowlist Bypass) 0.3%
• CVE-2026-14472 Medium 6.4 Kubio AI Page Builder <= 2.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via kubio/copyright Block Content 0.4%
• CVE-2026-16779 Medium 4.3 Kubio AI Page Builder <= 2.8.5 - Missing Authorization to Authenticated (Contributor+) Front-Page/Menu/Template Configuration Reversion via kubio_restore_front_page AJAX Action 0.4%
• CVE-2026-5427 Medium 5.3 Kubio AI Page Builder <= 2.7.2 - Missing Authorization to Authenticated (Contributor+) Limited File Upload via Kubio Block Attributes 0.5%
• CVE-2025-8487 Medium 5.4 Kubio AI Page Builder <= 2.6.3 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation 0.3%
• CVE-2025-2294 Critical 9.8 Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion 78.4%
• CVE-2024-13516 Medium 6.1 Kubio AI Page Builder <= 2.3.5 - Reflected Cross-Site Scripting 0.3%
• CVE-2024-39661 Medium 6.5 WordPress Kubio AI Page Builder plugin <= 2.2.4 - Authenticated Cross Site Scripting (XSS) vulnerability 0.3%