CubeWP vulnerabilities

3 known vulnerabilities in CubeWP from Imran Tauqeer. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  CubeWP: Missing Authorization

  CVE-2025-68036Dec 30, 2025Imran Tauqeer

  Missing Authorization vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects CubeWP: from n/a through <= 1.1.27.

• 8.8 High severity

  CubeWP: Incorrect Privilege Assignment

  CVE-2025-54735Aug 20, 2025Imran Tauqeer

  Incorrect Privilege Assignment vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Privilege Escalation.This issue affects CubeWP: from n/a through <= 1.1.24.

• 8.8 High severity

  CubeWP: Missing Authorization

  CVE-2024-48039Nov 1, 2024Imran Tauqeer

  Missing Authorization vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CubeWP: from n/a through <= 1.1.15.