Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Kubio AI Page Builder allows Stored XSS.This issue affects Kubio AI Page Builder: from n/a through 2.7.0.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-03-31 | 2 | Disclosure2 |
| 2026-04-07 | 1 | PoC1 |
https://atomicedge.io/cve-proof/cve-2026-34887-kubio-version-2-7-0-medium-vulnerability-proof-of-concept CVE-2026-34887 #WordPress plugin #vulnerability kubio #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge
Post summary
The post links to a proof‑of‑concept for CVE‑2026‑34887 in Kubio 2.7.0, but it provides no evidence of active exploitation, patches, or detailed technical data.
CVE-2026-34887 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Kubio AI Page Builder allows Stored XSS.This issue… https://www.cve.org/CVERecord?id=CVE-2026-34887
Post summary
The post announces CVE-2026-34887, a Stored XSS vulnerability in Extend Themes Kubio AI Page Builder, but offers only a brief description and a link to the CVE record without any PoC, exploit, or patch details.
CVE-2026-34887 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Kubio AI Page Builder allows Stored XSS.This issue affects Kubio AI Page Builder https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-34887
Post summary
The text announces CVE‑2026‑34887, describing it as a stored XSS vulnerability in Kubio AI Page Builder and linking to a detailed vulnerability report.