cubewp1211 CubeWP Framework

• CVE-2026-13339 High 7.5 CubeWP Framework <= 1.1.30 - Unauthenticated Arbitrary File Read via prev_icon/next_icon Parameter 0.9%
• CVE-2026-6453 Medium 6.5 CubeWP Framework <= 1.1.30 - Authenticated (Subscriber+) SQL Injection via 'relation_id' Parameter 0.5%
• CVE-2025-6461 Medium 4.3 CubeWP – All-in-One Dynamic Content Framework <= 1.1.27 - Unauthenticated Post Disclosure in class-cubewp-search-ajax-hooks.php 0.2%
• CVE-2025-8615 Medium 6.4 CubeWP <= 1.1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via cubewp_shortcode_taxonomy Shortcode 0.2%
• CVE-2025-12129 Medium 5.3 CubeWP – All-in-One Dynamic Content Framework <= 1.1.27 - Unauthenticated Information Exposure 0.3%
• CVE-2025-4315 High 8.8 CubeWP – All-in-One Dynamic Content Framework <= 1.1.23 - Authenticated (Subscriber+) Privilege Escalation 0.5%