Kubio AI Page Builder, CVE-2025-8487

CVE, Research URL: CVE-2025-8487
Home page URL: Security reports for Kubio AI Page Builder
Application: Kubio AI Page Builder
Published on: Sep 19, 2025
Research Description: The Kubio AI Page Builder plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check on the kubio-image-hub-install-plugin AJAX action in all versions up to, and including, 2.6.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install the Image Hub plugin.
Affected versions: max 2.6.5.
Status: vulnerable