WordPress security by component

CubeWP – All-in-One Dynamic Content Framework

Plugin description

CubeWP – All-in-One Dynamic Content Framework is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Jan 25, 2026; the highest CVE/CNA score is 5.3.

Plugin slug: cubewp-all-in-one-dynamic-content-framework

Latest vulnerability

CVE-2025-6461: CubeWP – All-in-One Dynamic Content Framework: A security weakness

CubeWP – All-in-One Dynamic Content Framework is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedJan 25, 2026

Safe version guidanceSee mitigation notes

		Safe version
Jan 25, 2026	CVE-2025-6461 CubeWP – All-in-One Dynamic Content Framework: A security weakness CubeWP – All-in-One Dynamic Content Framework is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE4.3 NVDPending
Jan 17, 2026	CVE-2025-12129 CubeWP – All-in-One Dynamic Content Framework: A security weakness CubeWP – All-in-One Dynamic Content Framework is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE5.3 NVDPending