extendthemes CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM extendthemes CVE published 2026-09-18

CVE-2026-14472

The Kubio AI Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via kubio/copyright Block Content in all versions up to, and including, 2.8.4 due to insufficient input sanitization and output escaping. This vulnerability allows attackers with contributor-level access to inject web scripts, impacting users accessing injected pages. The plugin's insufficient sanitization and outp [truncated]