Cubewp1211 Cubewp Framework vulnerabilities
- cubewp1211 cubewp frameworkCubeWP Framework <= 1.1.30 - Contributor+ Arbitrary Post and User Meta Disclosure via IDOR4.9 Medium
- cubewp1211 cubewp frameworkCubeWP Framework < 1.1.31 - Subscriber+ SQL Injection via cubewp_remove_relation8.1 High
- cubewp1211 cubewp frameworkCubeWP Framework <= 1.1.30 - Unauthenticated Arbitrary File Read via prev_icon/next_icon Parameter7.5 High
- cubewp1211 cubewp frameworkCubeWP Framework <= 1.1.30 - Authenticated (Subscriber+) SQL Injection via 'relation_id' Parameter6.5 Medium
- cubewp1211 cubewp frameworkCubeWP – All-in-One Dynamic Content Framework <= 1.1.27 - Unauthenticated Post Disclosure in class-cubewp-search-ajax-hooks.php4.3 Medium
- cubewp1211 cubewp frameworkCubeWP <= 1.1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via cubewp_shortcode_taxonomy Shortcode6.4 Medium
- cubewp1211 cubewp frameworkCubeWP – All-in-One Dynamic Content Framework <= 1.1.27 - Unauthenticated Information Exposure5.3 Medium
- cubewp, cubewp1211 cubewp framework +1 moreCubeWP – All-in-One Dynamic Content Framework <= 1.1.23 - Authenticated (Subscriber+) Privilege Escalation8.8 High