Kubio Ai Website Builder
Monthly
Availability disruption in Kubio AI Website Builder (a WordPress page-builder plugin by Extend Themes) affects all versions before 2.9.1, exploitable by authenticated high-privilege users over a network connection. CWE-20 improper input validation allows a privileged attacker to submit malformed input to the plugin, producing a denial-of-service condition against the vulnerable system with no confidentiality or integrity impact. No public exploit has been identified at time of analysis, and the CVSS 4.0 score of 6.9 reflects the high-privilege requirement that substantially limits the realistic attacker pool.
Availability disruption in Kubio AI Website Builder (a WordPress page-builder plugin by Extend Themes) affects all versions before 2.9.1, exploitable by authenticated high-privilege users over a network connection. CWE-20 improper input validation allows a privileged attacker to submit malformed input to the plugin, producing a denial-of-service condition against the vulnerable system with no confidentiality or integrity impact. No public exploit has been identified at time of analysis, and the CVSS 4.0 score of 6.9 reflects the high-privilege requirement that substantially limits the realistic attacker pool.