CVE-2024-30500

HIGH 8.8CVE-2024-30500 · Published 29/03/2024 · updated 17/06/2026

In short

CVE-2024-30500 is a HIGH (CVSS 8.8) vulnerability affecting cubewp (cubewp).
Chance of exploitation in the next 30 days (EPSS): 0.64%, higher than 51.0% of all vulnerabilities.
Fix: update to 1.1.13 or later.

Package	Affected versions	Patched versions
cubewp cubewp	`< 1.1.13`	`1.1.13`

Description

Unrestricted Upload of File with Dangerous Type vulnerability in CubeWP CubeWP – All-in-One Dynamic Content Framework.This issue affects CubeWP – All-in-One Dynamic Content Framework: from n/a through 1.1.12.

References

patchstack.com/database/vulnerability/cubewp-framework/wordpress-cubewp-plugin-1-1-12-arbitrary-file-upload-vulnerability · Third Party Advisory

More vulnerabilities in cubewp

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free