cubewp1211 vulnerabilities
6 published CVEs name cubewp1211 among the affected products.
- 6Published CVEs6 of them scored
- 5Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-13339
CubeWP Framework <= 1.1.30 - Unauthenticated Arbitrary File Read via prev_icon/next_icon Parameter
cubewp1211 · CubeWP Framework
High7.5 - CVE-2026-6453
CubeWP Framework <= 1.1.30 - Authenticated (Subscriber+) SQL Injection via 'relation_id' Parameter
cubewp1211 · CubeWP Framework
Medium6.5 - CVE-2025-6461
CubeWP – All-in-One Dynamic Content Framework <= 1.1.27 - Unauthenticated Post Disclosure in class-cubewp-search-ajax-hooks.php
cubewp1211 · CubeWP Framework
Medium4.3 - CVE-2025-8615
CubeWP <= 1.1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via cubewp_shortcode_taxonomy Shortcode
cubewp1211 · CubeWP Framework
Medium6.4 - CVE-2025-12129
CubeWP – All-in-One Dynamic Content Framework <= 1.1.27 - Unauthenticated Information Exposure
cubewp1211 · CubeWP Framework
Medium5.3 - CVE-2025-4315
CubeWP – All-in-One Dynamic Content Framework <= 1.1.23 - Authenticated (Subscriber+) Privilege Escalation
cubewp1211 · CubeWP Framework
High8.8