Known vulnerabilities in Kubio AI Page Builder

Using the power of AI, Kubio gives you a head start by generating a first draft of your website, which you can further customize to your liking.

7Reported vulnerabilities

9.8Highest CVSS score

2.9.0Latest version

80,000+Active installs

What to do now

Update Kubio AI Page Builder to 2.8.6 or later. 7 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 18, 2026 / Tested up to WordPress: 7.1 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2025-2294	Critical 9.8	78.4%	0 to 2.5.1 (inclusive)	`2.5.2`	March 28, 2025
CVE-2024-39661	Medium 6.4	0.3%	2.2.4 and earlier	`2.2.5`	August 1, 2024
CVE-2026-34887	Medium 6.4	0.1%	2.7.0 and earlier	`2.7.1`	March 31, 2026
CVE-2024-13516	Medium 6.1	0.3%	0 to 2.3.5 (inclusive)	`2.4.0`	January 18, 2025
CVE-2026-5427	Medium 5.3	0.5%	0 to 2.7.2 (inclusive)	`2.7.3`	April 17, 2026
CVE-2025-8487	Medium 5.4	0.3%	0 to 2.6.3 (inclusive)	`2.6.5`	September 19, 2025
CVE-2026-16779	Medium 4.3	0.2%	0 to 2.8.5 (inclusive)	`2.8.6`	August 16, 2026

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.