cubewp1211

Top products

The 6 most recently published vulnerabilities affecting cubewp1211.

• CVE-2026-13339CubeWP Framework <= 1.1.30 - Unauthenticated Arbitrary File Read via prev_icon/next_icon Parameter7.5Aug 1, 2026
• CVE-2026-6453CubeWP Framework <= 1.1.30 - Authenticated (Subscriber+) SQL Injection via 'relation_id' Parameter6.5Aug 1, 2026
• CVE-2025-6461CubeWP – All-in-One Dynamic Content Framework <= 1.1.27 - Unauthenticated Post Disclosure in class-cubewp-search-ajax-hooks.php4.3Jan 25, 2026
• CVE-2025-8615CubeWP <= 1.1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via cubewp_shortcode_taxonomy Shortcode6.4Jan 17, 2026
• CVE-2025-12129CubeWP – All-in-One Dynamic Content Framework <= 1.1.27 - Unauthenticated Information Exposure5.3Jan 17, 2026
• CVE-2025-4315CubeWP – All-in-One Dynamic Content Framework <= 1.1.23 - Authenticated (Subscriber+) Privilege Escalation8.8Jun 11, 2025