CVE-2024-48039mediumCWE-862

CVE-2024-48039: falha de média gravidade em Imran Tauqeer CubeWP

WordPress CubeWP Framework plugin <= 1.1.15 - Broken Access Control vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar CubeWP

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.3epss 0.3%
Missing Authorization vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CubeWP: from n/a through <= 1.1.15.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Produtos afetados
Imran Tauqeer · CubeWP
CVEs relacionadas — Imran Tauqeer CubeWP

No mesmo produto, das mais perigosas para as menos.

CVE-2025-54735HIGHWordPress CubeWP Framework Plugin <= 1.1.24 - Privilege Escalation VulnerabilityEPSS 0.4%CVE-2026-28168HIGHWordPress CubeWP plugin <= 1.1.30 - SQL Injection vulnerabilityEPSS 0.4%CVE-2025-68036HIGHWordPress CubeWP plugin <= 1.1.27 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-59569MEDIUMWordPress CubeWP Plugin <= 1.1.26 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-49882MEDIUMWordPress CubeWP Framework plugin <= 1.1.23 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-30994MEDIUMWordPress CubeWP plugin <= 1.1.29 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%