Vulnerabilities / CubeWP Framework
CubeWP Framework vulnerabilities
Advisories WPSec published for CubeWP Framework. Other sources may list more. Its attack surface: CubeWP Framework on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-14 | WPSEC-2026-3141 | CubeWP Framework <= 1.1.31 - Authenticated (Subscriber+) Stored Cross-Site Scripting via REST API Custom Field Meta | Medium 6.4 | 1.1.32 |
License: CC BY 4.0