Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CubeWP Framework — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in CubeWP Framework, with AI-generated Chinese analysis, references, and POCs.

Vendor: cubewp1211

CVE IDTitleCVSSSeverityPublished
CVE-2025-6461 CubeWP – All-in-One Dynamic Content Framework <= 1.1.27 - Unauthenticated Post Disclosure in class-cubewp-search-ajax-hooks.php CWE-200 4.3 Medium2026-01-25
CVE-2025-8615 CubeWP <= 1.1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via cubewp_shortcode_taxonomy Shortcode CWE-79 6.4 Medium2026-01-17
CVE-2025-12129 CubeWP – All-in-One Dynamic Content Framework <= 1.1.27 - Unauthenticated Information Exposure CWE-200 5.3 Medium2026-01-17
CVE-2025-4315 CubeWP – All-in-One Dynamic Content Framework <= 1.1.23 - Authenticated (Subscriber+) Privilege Escalation CWE-269 8.8 High2025-06-11

All 4 known CVE vulnerabilities affecting CubeWP Framework with full Chinese analysis, references, and POCs where available.