CVE-2025-8487

Name of the Vulnerable Software and Affected Versions Kubio AI Page Builder plugin for WordPress versions up to and including 2.6.3

Description The Kubio AI Page Builder plugin for WordPress is susceptible to unauthorized plugin installation due to a missing capability check on the kubio-image-hub-install-plugin AJAX action. This allows authenticated attackers with Subscriber-level access or higher to install the Image Hub plugin.

Recommendations Update Kubio AI Page Builder plugin to a version later than 2.6.3.