Known vulnerabilities in Kubio AI Page Builder

Using the power of AI, Kubio gives you a head start by generating a first draft of your website, which you can further customize to your liking.

13Reported vulnerabilities

9.8Highest CVSS score

2.9.0Latest version

80,000+Active installs

What to do now

Update Kubio AI Page Builder to 2.9.4 or later. 13 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 18, 2026 / Tested up to WordPress: 7.1 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2025-2294	Critical 9.8	78.4%	0 to 2.5.1 (inclusive)	`2.5.2`	March 28, 2025
CVE-2026-100107	High 7.2	0.3%	0 to 2.9.2 (inclusive)	`2.9.3`	October 2, 2026
CVE-2026-88783	High 7.2	0.3%	2.9.2 and earlier	`2.9.3`	October 1, 2026
CVE-2026-94167	High 7.2	0.2%	2.9.3 and earlier	`2.9.4`	October 4, 2026
CVE-2026-14472	Medium 6.4	0.3%	0 to 2.8.4 (inclusive)	`2.8.5`	September 18, 2026
CVE-2024-39661	Medium 6.4	0.3%	2.2.4 and earlier	`2.2.5`	August 1, 2024
CVE-2026-88782	Medium 6.4	0.2%	2.9.2 and earlier	`2.9.3`	October 1, 2026
CVE-2026-34887	Medium 6.4	0.2%	2.7.0 and earlier	`2.7.1`	March 31, 2026
CVE-2024-13516	Medium 6.1	0.3%	0 to 2.3.5 (inclusive)	`2.4.0`	January 18, 2025
CVE-2025-8487	Medium 5.4	0.3%	0 to 2.6.3 (inclusive)	`2.6.5`	September 19, 2025
CVE-2026-5427	Medium 5.3	0.5%	0 to 2.7.2 (inclusive)	`2.7.3`	April 17, 2026
CVE-2026-83492	Medium 4.9	0.4%	Before 2.9.1	`2.9.1`	August 31, 2026
CVE-2026-16779	Medium 4.3	0.4%	0 to 2.8.5 (inclusive)	`2.8.6`	August 16, 2026

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.