Imran Tauqeer vulnerabilities
We track 4 vulnerabilities in Imran Tauqeer products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on December 30, 2025.
Latest Imran Tauqeer vulnerabilities
- 7.5 High severity
CubeWP: Missing Authorization
Missing Authorization vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects CubeWP: from n/a through <= 1.1.27.
- 8.8 High severity
CubeWP: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Privilege Escalation.This issue affects CubeWP: from n/a through <= 1.1.24.
- 8.8 High severity
CubeWP: Missing Authorization
Missing Authorization vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CubeWP: from n/a through <= 1.1.15.
- 7.1 High severity
CubeWP Forms: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Imran Tauqeer CubeWP Forms cubewp-forms allows Stored XSS.This issue affects CubeWP Forms: from n/a through <= 1.1.1.