CubeWP

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

CubeWP records in CISA KEV

No CubeWP vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cubewp 3 records MEDIUM

Records

3 records

TI-2024-20224 CVE-2024-30500 · GHSA-5wqc-p6hx-3xmx

WordPress CubeWP plugin <= 1.1.12 - Arbitrary File Upload vulnerability

MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in CubeWP CubeWP – All-in-One Dynamic Content Framework.This issue affects CubeWP – All-in-One Dynamic Content Framework: from n/a through 1.1.12.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00643 Published 2024-03-29 No fix listed CWE-434

TI-2025-03844 CVE-2025-4315 · GHSA-7rjr-qv3w-fhmx

CubeWP – All-in-One Dynamic Content Framework <= 1.1.23 - Authenticated (Subscriber+) Privilege Escalation

MEDIUM 41

The CubeWP – All-in-One Dynamic Content Framework plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.23.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00553 Published 2025-06-11 No fix listed CWE-269

TI-2024-32241 CVE-2024-48039 · GHSA-r6g2-5hhq-jqm7

WordPress CubeWP Framework plugin <= 1.1.15 - Broken Access Control vulnerability

LOW 38

Missing Authorization vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CubeWP: from n/a through <= 1.1.15.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00323 Published 2024-11-01 No fix listed CWE-862

Open these records in search →

Critical	1
High	2
Medium	0
Low	0
No CVSS	0