Vulnerabilities

TI-2026-22508 CVE-2026-28168 · GHSA-6hwm-5426-rxg2

WordPress CubeWP plugin <= 1.1.30 - SQL Injection vulnerability

LOW 37

Subscriber SQL Injection in CubeWP <= 1.1.30 versions.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00357 Published 2026-08-13 No fix listed CWE-89

TI-2025-41645 CVE-2025-68036 · GHSA-3wm7-jw5g-v3gq

WordPress CubeWP plugin <= 1.1.27 - Broken Access Control vulnerability

MEDIUM 41

Missing Authorization vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects CubeWP: from n/a through <= 1.1.27.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00276 Published 2025-12-29 No fix listed CWE-862

TI-2025-37099 CVE-2025-59569 · GHSA-3wxq-grgm-m8r3

WordPress CubeWP Plugin <= 1.1.26 - Cross Site Scripting (XSS) Vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Stored XSS.This issue affects CubeWP: from n/a through <= 1.1.26.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00209 Published 2025-09-22 No fix listed CWE-79

TI-2025-34498 CVE-2025-54735 · GHSA-r4fq-q33j-5qh6

WordPress CubeWP Framework Plugin <= 1.1.24 - Privilege Escalation Vulnerability

MEDIUM 40

Incorrect Privilege Assignment vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Privilege Escalation.This issue affects CubeWP: from n/a through <= 1.1.24.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00373 Published 2025-08-20 No fix listed CWE-266

TI-2025-31795 CVE-2025-49880 · GHSA-mjvp-94v4-c6p4

WordPress CubeWP Forms plugin <= 1.1.5 - Broken Access Control Vulnerability

LOW 19

Missing Authorization vulnerability in Imran Tauqeer CubeWP Forms cubewp-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CubeWP Forms: from n/a through <= 1.1.5.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00219 Published 2025-06-17 No fix listed CWE-862

TI-2025-31797 CVE-2025-49882 · GHSA-q6xm-78fh-vq57

WordPress CubeWP Framework plugin <= 1.1.23 - Cross Site Scripting (XSS) Vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Imran Tauqeer CubeWP cubewp-framework allows DOM-Based XSS.This issue affects CubeWP: from n/a through <= 1.1.23.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00192 Published 2025-06-17 No fix listed CWE-79

TI-2025-22264 CVE-2025-30994 · GHSA-82wg-cw52-6chw

WordPress CubeWP plugin <= 1.1.29 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Cross Site Request Forgery.This issue affects CubeWP: from n/a through <= 1.1.29.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00165 Published 2025-06-06 No fix listed CWE-352

TI-2024-34565 CVE-2024-51651 · GHSA-8rqw-pf8c-9xhv

WordPress CubeWP Forms plugin <= 1.1.10 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in Imran Tauqeer CubeWP Forms cubewp-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CubeWP Forms: from n/a through <= 1.1.10.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00381 Published 2025-01-07 No fix listed CWE-862

TI-2024-31618 CVE-2024-47300 · GHSA-9c7v-wf9r-mffp

WordPress CubeWP Forms plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Imran Tauqeer CubeWP Forms cubewp-forms allows Stored XSS.This issue affects CubeWP Forms: from n/a through <= 1.1.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00287 Published 2024-10-06 No fix listed CWE-79

Vulnerabilities

Filters