5.4
Moyenne
CVE-2025-8487 The Kubio AI Page Builder plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing…
Description
The Kubio AI Page Builder plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check on the kubio-image-hub-install-plugin AJAX action in all versions up to, and including, 2.6.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install the Image Hub plugin.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Kubio AI Page Builder 2.6 | premières → 2.6.3 | Pas de correctif indiqué |
Autres CVE de Kubio AI Page Builder
Les 9 CVE de Kubio AI Page Builder →
CVE-2026-115816
Kubio AI Page Builder <= 2.9.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via kubio/shortcode Block via Product Review
6.4
Moyenne
CVE-2026-100107
The Kubio AI Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment'…
7.2
Élevée
CVE-2026-14472
The Kubio AI Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via kubio/copyright Block…
6.4
Moyenne
CVE-2026-16779
The Kubio AI Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and…
4.3
Moyenne