WordPress - Kubio AI Website Builder DoS

T1Covered by 1 source · first reported by Tenable Research at 31 Aug, 15:42 UTC

WordPress - Kubio AI Website Builder DoS The REST endpoint `GET /wp-json/kubio/v1/enable-theme` passes the client-supplied `name` parameter directly and without validation into WordPress core's `switch_theme()`: // lib/api/colibri.php function kubio_enable_theme( WP_REST_Request $data ) {…

devsecurity

Sources

• T1WordPress - Kubio AI Website Builder DoSTenable Research31 Aug, 15:42