QU
Product
Qubely
10
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 9Low 0
Watch
Add Qubely to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-24916 | 7.5 | Aug 7 | Qubely < 1.8.6 - Unauthenticated Arbitrary E-mail Sending Affected: before 1.8.6 |
| CVE-2024-13228 | 6.5 | Mar 11 | Qubely – Advanced Gutenberg Blocks <= 1.8.13 - Authenticated (Contributor+) Sensitive Information Exposure via qubely_get_content Affected: before 1.8.14 |
| CVE-2021-25013 | 6.5 | Jan 24 | The Qubely WordPress plugin before 1.7.8 does not have authorisation and CSRF check on the qubely_delete_saved_block AJAX action, and does not ensure that the block to be deleted… Affected: before 1.7.8 |
| CVE-2026-39638 | 5.9 | Apr 8 | WordPress Qubely plugin <= 1.8.14 - Cross Site Scripting (XSS) vulnerability Affected: through 1.8.14 |
| CVE-2025-26767 | 5.4 | Feb 16 | WordPress Qubely plugin <= 1.8.12 - Cross Site Scripting (XSS) vulnerability Affected: through 1.8.12 |
| CVE-2024-9601 | 5.4 | Feb 14 | Qubely – Advanced Gutenberg Blocks <= 1.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' and 'UniqueID' Affected: before 1.8.13 |
| CVE-2023-0376 | 5.4 | Jan 16 | Qubely < 1.8.5 - Contributor+ Stored XSS Affected: before 1.8.5 |
| CVE-2026-65531 | 4.8 | Jul 23 | WordPress Qubely plugin <= 1.8.14 - Broken Access Control vulnerability Affected: through 1.8.14 |
| CVE-2025-58249 | 4.3 | Sep 22 | WordPress Qubely Plugin <= 1.8.14 - Sensitive Data Exposure Vulnerability Affected: through 1.8.14 |
| CVE-2025-58663 | 4.3 | Sep 22 | WordPress Qubely Plugin <= 1.8.14 - Broken Access Control Vulnerability Affected: through 1.8.14 |
Showing 10
