CyberSecBulletin

Cubewp1211 vulnerabilities

We track 2 vulnerabilities in Cubewp1211 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 2, 2026.

2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score

Latest Cubewp1211 vulnerabilities

  • 7.5 High severity

    CubeWP Framework: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2026-13339Cubewp1211

    The CubeWP Framework plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.30 via the 'cubewp_get_svg_content' function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files

  • 8.8 High severity

    CubeWP Framework: Improper Privilege Management

    CVE-2025-4315Cubewp1211

    The CubeWP – All-in-One Dynamic Content Framework plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.23. This is due to the plugin allowing a user to update arbitrary user meta through the update_user_meta() fu