CVE-2026-88782

Name of the Vulnerable Software and Affected Versions Kubio AI Page Builder WordPress plugin versions prior to 2.9.3

Description Insufficient validation of the URI scheme in a user-supplied value allows users with the contributor role and above to store a malicious payload. This payload executes in the browser of any user who follows the link, including administrators previewing unpublished submissions.

Recommendations Update the plugin to version 2.9.3 or later.