CVE-2024-30500

Severity

CRITICAL

CVSS

9.9

EPSS

0.00643

Risk score

39.83

CISA KEV

PoC

Published

2024-03-29

Modified

2026-04-28

First seen

2026-08-07

Aliases

EUVD-2024-28420, GHSA-5WQC-P6HX-3XMX

Products

cubewp1211:CubeWP – All-in-One Dynamic Content Framework n/a ≤1.1.12

Sources

euvd EUVD-2024-28420

Description

Unrestricted Upload of File with Dangerous Type vulnerability in CubeWP CubeWP – All-in-One Dynamic Content Framework.This issue affects CubeWP – All-in-One Dynamic Content Framework: from n/a through 1.1.12.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-28420
https://patchstack.com/database/vulnerability/cubewp-framework/wordpress-cubewp-plugin-1-1-12-arbitrary-file-upload-vulnerability?_s_id=cve