Exploit for CVE-2025-2294

githubexploit · 2025-07-28

Description

Exploit for CVE-2025-2294 impacting WordPress Kubio AI Page Builder for authorized testing only

Entry point

Parameter__kubio-site-edit-iframe-classic-template · query param

Path/?__kubio-site-edit-iframe-preview=1&__kubio-site-edit-iframe-classic-template=

Local File Inclusion via path traversal in Kubio plugin (kubio_hybrid_theme_load_template) allowing inclusion of arbitrary server files.

All known vulnerabilities by product

Kubio Ai Page Builder

CVSS 9.8 for CVE-2025-2294

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

100%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

77.9%higher than 99.5% of all CVEs

Updated 2026-08-02

CVE Information

Exploit Details

Modified:2025-07-28 02:09

Last Seen:2025-08-31 22:49

Reporter:r0otk3r

Written in:Python

Last commit:2025-07-28

Tags

CVE-2025-2294wordpresskubio aisecurity testingunauthorized use

Other exploits for CVE-2025-2294

Exploit for CVE-2025-2294

2026-01-23 fumioryotoGITHUB

📄 Kubio AI Page Builder 2.5.1 PHP LFI Extractor Scanner

2025-12-18 indoushkaPACKETSTORMPHP

Exploit for CVE-2025-22294

2025-09-25 mirmeweuGITHUB

Exploit for CVE-2025-2294

2025-05-24 0xWhoami35GITHUB

Exploit for CVE-2025-2294

2025-05-13 YucaerinGITHUB

Exploit for CVE-2025-2294

2025-04-26 romanedutovGITHUB

Exploit for CVE-2025-2294

2025-04-15 rhz0dGITHUB

📄 Kubio AI Page Builder 2.5.1 Local File Inclusion

2025-04-07 Sheikh Mohammad HasanPACKETSTORMPython

Exploit Code

README22 lines

## https://sploitus.com/exploit?id=EAFFAB1F-125E-5766-9B44-8D7F1D6549AB
# CVE-2025-2294 - WordPress Kubio AI Page Builder 


Request/Response:





## ⚠️ Disclaimer

This tool is intended for authorized security testing and research purposes only. Unauthorized use against systems without permission is illegal and unethical.


---


## Official Channels

- [YouTube @rootctf](https://www.youtube.com/@rootctf)
- [X @r0otk3r](https://x.com/r0otk3r)