CVE-2025-54735highCWE-266

CVE-2025-54735: falha de alta gravidade em Imran Tauqeer CubeWP

WordPress CubeWP Framework Plugin <= 1.1.24 - Privilege Escalation Vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar CubeWP

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.8epss 0.4%
Incorrect Privilege Assignment vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Privilege Escalation.This issue affects CubeWP: from n/a through <= 1.1.24.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Imran Tauqeer · CubeWP
CVEs relacionadas — Imran Tauqeer CubeWP

No mesmo produto, das mais perigosas para as menos.

CVE-2026-28168HIGHWordPress CubeWP plugin <= 1.1.30 - SQL Injection vulnerabilityEPSS 0.4%CVE-2024-48039MEDIUMWordPress CubeWP Framework plugin <= 1.1.15 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-68036HIGHWordPress CubeWP plugin <= 1.1.27 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-59569MEDIUMWordPress CubeWP Plugin <= 1.1.26 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-49882MEDIUMWordPress CubeWP Framework plugin <= 1.1.23 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-30994MEDIUMWordPress CubeWP plugin <= 1.1.29 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%