Kubiq
6 CVEs across 8 Kubiq products. Browse Kubiq vulnerabilities, severities, and proof-of-concept exploits.
Kubiq products with known CVEs
Kubiq CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-67469 | Medium | 4.3 | 2025-12-09 | Cross-Site Request Forgery (CSRF) vulnerability in kubiq PDF Thumbnail Generator pdf-thumbnail-generator allows Cross Site Request Forgery.This issue affects P… |
CVE-2024-11402 | High | 7.1 | 2024-11-28 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kubiq Block Editor Bootstrap Blocks block-editor-bootstra… |
CVE-2024-8737 | Medium | 6.1 | 2024-09-13 | The PDF Thumbnail Generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping o… |
CVE-2024-5945 | Medium | 6.4 | 2024-06-21 | The WP SVG Images plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘type’ parameter in all versions up to, and including, 4.3 due to i… |
CVE-2022-29431 | Medium | 5.4 | 2022-05-20 | Cross-Site Request Forgery (CSRF) vulnerability in KubiQ CPT base plugin <= 5.8 at WordPress allows an attacker to delete the CPT base. |
CVE-2022-29430 | Medium | 4.7 | 2022-05-20 | Cross-Site Scripting (XSS) vulnerability in KubiQ's PNG to JPG plugin <= 4.0 at WordPress via Cross-Site Request Forgery (CSRF). Vulnerable parameter &jpg_qual… |
CVE-2021-24386 | Medium | 5.4 | 2021-07-06 | The WP SVG images WordPress plugin before 3.4 did not sanitise the SVG files uploaded, which could allow low privilege users such as author+ to upload a malici… |