CVE Intelligence

Imran Tauqeer vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Imran Tauqeer products: 3 record(s), with severity, exploitation and fixes.

CubeWP 3

Exploited only (KEV) →

CVE-2026-28168 High · 8.5 CWE-89 Aug 13, 2026
WordPress CubeWP plugin <= 1.1.30 - SQL Injection vulnerability
Subscriber SQL Injection in CubeWP <= 1.1.30 versions.
CVE-2025-68036 High · 7.5 CWE-862 Dec 29, 2025
WordPress CubeWP plugin <= 1.1.27 - Broken Access Control vulnerability
Missing Authorization vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects CubeWP: from n/a through <= 1.1.27.
CVE-2025-59569 Medium · 6.5 CWE-79 Sep 22, 2025
WordPress CubeWP Plugin <= 1.1.26 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Stored XSS.This issue affects CubeWP: from n/a through <= 1.1.26.