sales@hackhalt.com
Free Download

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total15
Critical0
High7
Medium8
Reset
Showing 1-15 of 15 records
Threat Entry Updated 2026-08-26

CubeWP Framework - Security Vulnerability (CVE-2026-17018)

The CubeWP Framework WordPress plugin through 1.1.30 does not perform a per-object read authorization check, nor restrict which metadata keys may be requested, on one of its REST API endpoints, allowing users with the Contributor role and above to read arbitrary post metadata (including that of other users' draft, pending, private, and password-protected posts) and arbitrary user metadata of any user, including administrators.

PLUGIN CubeWP Framework

CVE-2026-17018

MEDIUM CVSS 4.9 2026-08-10
Open Full Technical Breakdown
Threat Entry Updated 2026-08-26

CubeWP Framework - SQL Injection (CVE-2026-17017)

The CubeWP Framework WordPress plugin before 1.1.31 does not properly sanitize and escape a parameter before using it in a SQL statement through an AJAX action, and does not include a capability check on that action, allowing users with Subscriber-level access and above to perform SQL injection attacks.

PLUGIN CubeWP Framework

CVE-2026-17017

HIGH CVSS 8.1 2026-08-09
Open Full Technical Breakdown
Threat Entry Updated 2026-08-12

Cubewp Framework - Path Traversal (CVE-2026-13339)

The CubeWP Framework plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.30 via the 'cubewp_get_svg_content' function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. This is exploitable by unauthenticated attackers because the required nonce is publicly emitted into the markup of any page rendering the CubeWP posts shortcode or widget with AJAX loading enabled, making it harvestable by any guest visitor before submitting the AJAX request.

PLUGIN Cubewp Framework

CVE-2026-13339

HIGH CVSS 7.5 2026-08-02
Open Full Technical Breakdown
Threat Entry Updated 2026-08-12

Cubewp Framework - SQL Injection (CVE-2026-6453)

The CubeWP Framework plugin for WordPress is vulnerable to SQL Injection in all versions up to and including 1.1.30. This is due to insufficient input sanitization in the cubewp_remove_relation() AJAX function, specifically the use of wp_unslash() on the relation_id parameter before interpolating it directly into a raw SQL query without using $wpdb->prepare(). The wp_unslash() call explicitly removes the backslash escaping that WordPress's wp_magic_quotes() adds to all $_POST data, neutralizing the only layer of SQL injection protection. The sanitize_text_field() function applied afterward offers no SQL protection. This makes it possible for…

PLUGIN Cubewp Framework

CVE-2026-6453

MEDIUM CVSS 6.5 2026-08-01
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

Cubewp Framework - Information Disclosure (CVE-2025-6461)

The CubeWP – All-in-One Dynamic Content Framework plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.1.27 via the search feature in class-cubewp-search-ajax-hooks.php due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from password protected, private, or draft posts that they should not have access to.

PLUGIN Cubewp Framework

CVE-2025-6461

MEDIUM CVSS 4.3 2026-01-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

Cubewp Framework - Cross-Site Scripting (XSS) (CVE-2025-8615)

The CubeWP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's cubewp_shortcode_taxonomy shortcode in all versions up to, and including, 1.1.26 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

PLUGIN Cubewp Framework

CVE-2025-8615

MEDIUM CVSS 6.4 2026-01-17
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CubeWP Framework - Information Disclosure (CVE-2025-12129)

The CubeWP – All-in-One Dynamic Content Framework plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.1.27 via the /cubewp-posts/v1/query-new and /cubewp-posts/v1/query REST API endpoints due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from password protected, private, or draft posts that they should not have access to.

PLUGIN CubeWP Framework

CVE-2025-12129

MEDIUM CVSS 5.3 2026-01-17
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CubeWP Framework - Remote Code Execution (CVE-2025-10706)

The Classified Pro theme for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check in the 'cwp_addons_update_plugin_cb' function in all versions up to, and including, 1.0.14. This makes it possible for authenticated attackers, with subscriber-level access and above, to install arbitrary plugins on the affected site's server which may make remote code execution possible. Note: The required nonce for the vulnerability is in the CubeWP Framework plugin.

PLUGIN CubeWP Framework

CVE-2025-10706

HIGH CVSS 8.8 2025-10-16
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

Cubewp Framework - Privilege Escalation (CVE-2025-4315)

The CubeWP – All-in-One Dynamic Content Framework plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.23. This is due to the plugin allowing a user to update arbitrary user meta through the update_user_meta() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to elevate their privileges to that of an administrator.

PLUGIN Cubewp Framework

CVE-2025-4315

HIGH CVSS 8.8 2025-06-11
Open Full Technical Breakdown

WordPress security that blocks attacks before they land.

sales@hackhalt.com

Product

Resources

Company

© Hack Halt Inc. All rights reserved.