Cubewp1211 vulnerabilities

Products

• Cubewp Framework 8

Newest

• cubewp1211 cubewp framework CubeWP Framework <= 1.1.30 - Contributor+ Arbitrary Post and User Meta Disclosure via IDOR CVE-2026-17018 4.9 MediumAugust 10, 2026
• cubewp1211 cubewp framework CubeWP Framework < 1.1.31 - Subscriber+ SQL Injection via cubewp_remove_relation CVE-2026-17017 8.1 HighAugust 9, 2026
• cubewp1211 cubewp framework CubeWP Framework <= 1.1.30 - Unauthenticated Arbitrary File Read via prev_icon/next_icon Parameter CVE-2026-13339 7.5 HighAugust 1, 2026
• cubewp1211 cubewp framework CubeWP Framework <= 1.1.30 - Authenticated (Subscriber+) SQL Injection via 'relation_id' Parameter CVE-2026-6453 6.5 MediumAugust 1, 2026
• cubewp1211 cubewp framework CubeWP – All-in-One Dynamic Content Framework <= 1.1.27 - Unauthenticated Post Disclosure in class-cubewp-search-ajax-hooks.php CVE-2025-6461 4.3 MediumJanuary 25, 2026
• cubewp1211 cubewp framework CubeWP <= 1.1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via cubewp_shortcode_taxonomy Shortcode CVE-2025-8615 6.4 MediumJanuary 17, 2026
• cubewp1211 cubewp framework CubeWP – All-in-One Dynamic Content Framework <= 1.1.27 - Unauthenticated Information Exposure CVE-2025-12129 5.3 MediumJanuary 17, 2026
• cubewp, cubewp1211 cubewp framework +1 more CubeWP – All-in-One Dynamic Content Framework <= 1.1.23 - Authenticated (Subscriber+) Privilege Escalation CVE-2025-4315 8.8 HighJune 11, 2025
• cubewp, cubewp – all-in-one dynamic content framework, cubewp1211 cubewp – all-in-one dynamic content framework +2 more WordPress CubeWP plugin <= 1.1.12 - Arbitrary File Upload vulnerability CVE-2024-30500 9.9 CriticalMarch 29, 2024