Vulnerabilities

TI-2025-03844 CVE-2025-4315 · GHSA-7rjr-qv3w-fhmx

CubeWP – All-in-One Dynamic Content Framework <= 1.1.23 - Authenticated (Subscriber+) Privilege Escalation

MEDIUM 41

The CubeWP – All-in-One Dynamic Content Framework plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.23.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00553 Published 2025-06-11 No fix listed CWE-269

TI-2024-32241 CVE-2024-48039 · GHSA-r6g2-5hhq-jqm7

WordPress CubeWP Framework plugin <= 1.1.15 - Broken Access Control vulnerability

LOW 38

Missing Authorization vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CubeWP: from n/a through <= 1.1.15.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00323 Published 2024-11-01 No fix listed CWE-862

TI-2024-20224 CVE-2024-30500 · GHSA-5wqc-p6hx-3xmx

WordPress CubeWP plugin <= 1.1.12 - Arbitrary File Upload vulnerability

MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in CubeWP CubeWP – All-in-One Dynamic Content Framework.This issue affects CubeWP – All-in-One Dynamic Content Framework: from n/a through 1.1.12.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00643 Published 2024-03-29 No fix listed CWE-434

Vulnerabilities

Filters

CubeWP – All-in-One Dynamic Content Framework <= 1.1.23 - Authenticated (Subscriber+) Privilege Escalation

WordPress CubeWP Framework plugin <= 1.1.15 - Broken Access Control vulnerability

WordPress CubeWP plugin <= 1.1.12 - Arbitrary File Upload vulnerability