Imran Tauqeer Cubewp
7 CVEs affecting Imran Tauqeer Cubewp. Latest disclosed: 2026-08-13. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-54735 | High | 8.8 | 2025-08-20 | Incorrect Privilege Assignment vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Privilege Escalation.This issue affects CubeWP: from n/a through <… |
CVE-2026-28168 | High | 8.5 | 2026-08-13 | Subscriber SQL Injection in CubeWP <= 1.1.30 versions. |
CVE-2025-68036 | High | 7.5 | 2025-12-30 | Missing Authorization vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects… |
CVE-2025-59569 | Medium | 6.5 | 2025-09-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Stored XSS.T… |
CVE-2025-49882 | Medium | 6.5 | 2025-06-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Imran Tauqeer CubeWP cubewp-framework allows DOM-Based XS… |
CVE-2025-30994 | Medium | 4.3 | 2025-06-06 | Cross-Site Request Forgery (CSRF) vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Cross Site Request Forgery.This issue affects CubeWP: from n/a… |
CVE-2024-48039 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |