Critical Vulnerability in Kubio AI Page Builder WordPress Plugin: CVE-2026-88783
A critical vulnerability, CVE-2026-88783, with a CVSS score of 8.8, was discovered in the Kubio AI Page Builder WordPress plugin. This vulnerability allows unauthenticated users to store malicious HTML markup, which can be executed in the browser of any visitor or administrator, leading to high impacts on confidentiality, integrity, and availability. The plugin's failure to limit allowed HTML elements to the editor context enables this stored cross-site scripting (XSS) attack. Immediate patching to version 2.9.3 or later is strongly recommended.