CVE-2025-6461: medium-severity vulnerability in cubewp1211 CubeWP Framework
CubeWP – All-in-One Dynamic Content Framework <= 1.1.27 - Unauthenticated Post Disclosure in class-cubewp-search-ajax-hooks.php
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.3epss 0.2%
The CubeWP – All-in-One Dynamic Content Framework plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.1.27 via the search feature in class-cubewp-search-ajax-hooks.php due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from password protected, private, or draft posts that they should not have access to.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products
cubewp1211 · CubeWP FrameworkRelated CVEs — cubewp1211 CubeWP Framework
In the same product, most dangerous first.
CVE-2026-13339HIGHCubeWP Framework <= 1.1.30 - Unauthenticated Arbitrary File Read via prev_icon/next_icon ParameterEPSS 0.9%CVE-2025-4315HIGHCubeWP – All-in-One Dynamic Content Framework <= 1.1.23 - Authenticated (Subscriber+) Privilege EscalationEPSS 0.6%CVE-2026-6453MEDIUMCubeWP Framework <= 1.1.30 - Authenticated (Subscriber+) SQL Injection via 'relation_id' ParameterEPSS 0.5%CVE-2025-12129MEDIUMCubeWP – All-in-One Dynamic Content Framework <= 1.1.27 - Unauthenticated Information ExposureEPSS 0.3%CVE-2025-8615MEDIUMCubeWP <= 1.1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via cubewp_shortcode_taxonomy ShortcodeEPSS 0.2%