CVE-2026-83492 MEDIUM

CVE-2026-83492: WordPress Kubio AI Website Builder - Denial Of Service

Vendor Extend Themes

Product Kubio AI Website Builder

Weakness CWE-20 · Input validation

Published August 31, 2026

Last update August 31, 2026

View on NVD All CVEs

CVSS base score

6.9/10

Attack vector Network

Attack complexity Low

Privileges required High

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Improper input validation vulnerability in Extend Themes Kubio AI Website Builder. This issue affects Kubio AI Website Builder: before 2.9.1.

Explanation of Vulnerability in Simple Terms

02Summary

Kubio AI Website Builder versions before 2.9.1 do not properly validate user input, allowing an authenticated administrator to cause a denial of service by submitting malformed data. The vulnerability requires high-level privileges and does not affect data confidentiality or integrity. Site administrators should update to version 2.9.1 or later.

What an attacker can do

03Attacker Capabilities

An authenticated admin can submit invalid input to disrupt site availability.

Potential impact on your site

04Site Impact

Site availability may be disrupted if an admin submits malformed input to the builder.

Conditions required to exploit

05Prerequisites

Attacker must have administrator-level access to the site.

Key dates

06Disclosure timeline

August 31, 2026 CVE published

External resources

07References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-83492 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/20.html AskarLabs — CWE-20 write-up Improper Input Validation

Related vulnerabilities