Skip to content
OpenAdvisories

Vendor

extendthemes

34 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-2294 Public exploit EPSS 78%

    Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion

    The Kubio AI Page Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.5.1 via thekubio_hybrid_theme_load_template function. This makes it possible for unauthenticated attackers to include and execute arbi…