CubeWP records

3 published records for vendor cubewp.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2024-30500No exploit	WordPress CubeWP plugin <= 1.1.12 - Arbitrary File Upload vulnerabilitycubewp · cubewp · CWE-434 File upload	High8.8	—	0.6%	Mar 29, 2024
35Monitor	CVE-2025-4315No exploit	CubeWP – All-in-One Dynamic Content Framework <= 1.1.23 - Authenticated (Subscriber+) Privilege Escalationcubewp · cubewp · CWE-269	High8.8	—	0.5%	Jun 11, 2025
35Monitor	CVE-2024-48039No exploit	WordPress CubeWP Framework plugin <= 1.1.15 - Broken Access Control vulnerabilitycubewp · cubewp · CWE-862 Broken access control (IDOR)	High8.8	—	0.3%	Nov 1, 2024

CVE-2024-30500
35Monitor
WordPress CubeWP plugin <= 1.1.12 - Arbitrary File Upload vulnerability
HighCVSS 8.8No exploitEPSS 0%
- File upload
cubewp · cubewpMar 29, 2024
CVE-2025-4315
35Monitor
CubeWP – All-in-One Dynamic Content Framework <= 1.1.23 - Authenticated (Subscriber+) Privilege Escalation
HighCVSS 8.8No exploitEPSS 0%
cubewp · cubewpJun 11, 2025
CVE-2024-48039
35Monitor
WordPress CubeWP Framework plugin <= 1.1.15 - Broken Access Control vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
cubewp · cubewpNov 1, 2024