Vulnerability in Cubewp Framework

CVE-2026-17018

The CubeWP Framework WordPress plugin through 1.1.30 does not perform a per-object read authorization check, nor restrict which metadata keys may be requested, on one of its REST API endpoints, allowing users with the Contributor role and…

Affected products

  • Unknown Cubewp Framework — versions 0

References