Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Kubio AI Page Builder 2.9.3 Clear all filters
TI-2026-67435 CVE-2026-88783 · GHSA-w96f-q24m-hc95

Kubio AI Page Builder < 2.9.3 - Unauthenticated Stored XSS via Comment Content

Priority MEDIUM 40

The Kubio AI Page Builder WordPress plugin before 2.9.3 does not limit its widening of the allowed HTML elements to the editor context, so the wider set is applied when filtering content submitted by unauthenticated user…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00276 Published 2026-10-03 Fixed in 2.9.3 CWE-79
TI-2026-67434 CVE-2026-88782 · GHSA-gf46-mg37-6fp9

Kubio AI Page Builder < 2.9.3 - Contributor+ Stored XSS via Image Gallery Item URL Attribute

Priority LOW 31

The Kubio AI Page Builder WordPress plugin before 2.9.3 does not validate the URI scheme of a user-supplied value before outputting it as a link target, allowing users with the contributor role and above to store a paylo…

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00229 Published 2026-10-03 Fixed in 2.9.3 CWE-79