QU
Product
Qubely
by Themeum · last CVE Jul 23, 2026
10
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 9Low 0
Watch

Add Qubely to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-24916
7.5
2%
Aug 7
Qubely < 1.8.6 - Unauthenticated Arbitrary E-mail Sending
Affected: before 1.8.6
CVE-2024-13228
6.5
0%
Mar 11
Qubely – Advanced Gutenberg Blocks <= 1.8.13 - Authenticated (Contributor+) Sensitive Information Exposure via qubely_get_content
Affected: before 1.8.14
CVE-2021-25013
6.5
0%
Jan 24
The Qubely WordPress plugin before 1.7.8 does not have authorisation and CSRF check on the qubely_delete_saved_block AJAX action, and does not ensure that the block to be deleted…
Affected: before 1.7.8
CVE-2026-39638
5.9
0%
Apr 8
WordPress Qubely plugin <= 1.8.14 - Cross Site Scripting (XSS) vulnerability
Affected: through 1.8.14
CVE-2025-26767
5.4
0%
Feb 16
WordPress Qubely plugin <= 1.8.12 - Cross Site Scripting (XSS) vulnerability
Affected: through 1.8.12
CVE-2024-9601
5.4
0%
Feb 14
Qubely – Advanced Gutenberg Blocks <= 1.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' and 'UniqueID'
Affected: before 1.8.13
CVE-2023-0376
5.4
1%
Jan 16
Qubely < 1.8.5 - Contributor+ Stored XSS
Affected: before 1.8.5
CVE-2026-65531
4.8
0%
Jul 23
WordPress Qubely plugin <= 1.8.14 - Broken Access Control vulnerability
Affected: through 1.8.14
CVE-2025-58249
4.3
0%
Sep 22
WordPress Qubely Plugin <= 1.8.14 - Sensitive Data Exposure Vulnerability
Affected: through 1.8.14
CVE-2025-58663
4.3
0%
Sep 22
WordPress Qubely Plugin <= 1.8.14 - Broken Access Control Vulnerability
Affected: through 1.8.14
Showing 10