Known vulnerabilities in CubeWP Framework
CubeWP is an end-to-end dynamic content framework for WordPress to help you shrink time and cut cost of development up to 90%.
15Reported vulnerabilities
9.9Highest CVSS score
1.1.31Latest version
4,000+Active installs
What to do now
Update CubeWP Framework to 1.1.31 or later.
13 of these have a fixed version available. Updating resolves them.
Reported vulnerabilities
| CVE | Severity | Exploit probability |
Affected versions | Fixed in | Published |
|---|---|---|---|---|---|
| CVE-2024-30500 | Critical | 0.6% | 1.1.12 and earlier | 1.1.13 |
March 28, 2024 |
| CVE-2025-54735 | High | 0.4% | 1.1.24 and earlier | 1.1.25 |
August 19, 2025 |
| CVE-2025-4315 | High | 0.5% | Before 1.1.24 | 1.1.24 |
June 11, 2025 |
| CVE-2026-13339 | High | 0.7% | 0 to 1.1.30 (inclusive) | 1.1.31 |
August 2, 2026 |
| CVE-2026-28168 | Medium | 0.3% | 1.1.30 and earlier | 1.1.31 |
August 13, 2026 |
| CVE-2026-6453 | Medium | 0.3% | 0 to 1.1.30 (inclusive) | 1.1.31 |
August 1, 2026 |
| CVE-2025-8615 | Medium | 0.2% | 0 to 1.1.26 (inclusive) | 1.1.27 |
January 17, 2026 |
| CVE-2025-59569 | Medium | 0.2% | 1.1.26 and earlier | 1.1.27 |
September 22, 2025 |
| CVE-2025-49882 | Medium | 0.2% | 1.1.23 and earlier | 1.1.24 |
June 12, 2025 |
| CVE-2024-48039 | Medium | 0.3% | 1.1.15 and earlier | 1.1.16 |
October 9, 2024 |
| CVE-2025-12129 | Medium | 0.2% | 0 to 1.1.27 (inclusive) | 1.1.28 |
January 17, 2026 |
| CVE-2025-68036 | Medium | 0.3% | 1.1.27 and earlier | 1.1.28 |
December 26, 2025 |
| CVE-2026-17018 | Medium | 0.2% | 1.1.30 and earlier | — | August 5, 2026 |
| CVE-2025-6461 | Medium | 0.2% | 0 to 1.1.27 (inclusive) | 1.1.28 |
January 25, 2026 |
| CVE-2025-30994 | Medium | 0.2% | 1.1.24 and earlier | — | June 5, 2025 |