Unauthorized Plugin Installation in Kubio AI Page Builder for WordPress

CVE-2025-8487

What is CVE-2025-8487?

The Kubio AI Page Builder plugin for WordPress is susceptible to a security flaw that allows authenticated users, such as those with Subscriber access or higher, to install the Image Hub plugin without proper capability verification. This vulnerability arises from a missing capability check on the kubio-image-hub-install-plugin AJAX action, posing a risk to website integrity and security. Users are advised to update to the latest version to mitigate this issue.

References