Read the docs

CubeWP

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

CubeWP records in CISA KEV

No CubeWP vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Cubewp 3 records MEDIUM

Records

3 records in Cubewp · all components

TI-2024-20224 CVE-2024-30500 · GHSA-5wqc-p6hx-3xmx

WordPress CubeWP plugin <= 1.1.12 - Arbitrary File Upload vulnerability

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in CubeWP CubeWP – All-in-One Dynamic Content Framework.This issue affects CubeWP – All-in-One Dynamic Content Framework: from n/a through 1.1.12.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00643 Published 2024-03-29 No fix listed CWE-434
TI-2024-32241 CVE-2024-48039 · GHSA-r6g2-5hhq-jqm7

WordPress CubeWP Framework plugin <= 1.1.15 - Broken Access Control vulnerability

Priority LOW 38

Missing Authorization vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CubeWP: from n/a through <= 1.1.15.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00323 Published 2024-11-01 No fix listed CWE-862
Open these records in search →