Skip to content
OpenAdvisories

Vendor

kubiq

6 known vulnerabilities.

kubiq at a glance

Last 12 months
1
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 1 vulnerability Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202510
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

PDF Thumbnail Generator 2 Remove CPT base (WordPress plugin) 1 PNG to JPG (WordPress plugin) 1 Block Editor Bootstrap Blocks 1 WP SVG images 1
All Critical High Medium Low Exploited only Public exploit

6 results · Feed

  • Medium 4.3
    CVE-2025-67469

    WordPress PDF Thumbnail Generator plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in kubiq PDF Thumbnail Generator pdf-thumbnail-generator allows Cross Site Request Forgery.This issue affects PDF Thumbnail Generator: from n/a through <= 1.4.

    kubiq PDF Thumbnail Generator
  • High 7.1
    CVE-2024-11402

    WordPress Block Editor Bootstrap Blocks plugin <= 6.6.1 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kubiq Block Editor Bootstrap Blocks block-editor-bootstrap-blocks allows Reflected XSS.This issue affects Block Editor Bootstrap Blocks: from n/a through <= …

    kubiq Block Editor Bootstrap Blocks
  • Medium 6.1
    CVE-2024-8737

    PDF Thumbnail Generator <= 1.3 - Reflected Cross-Site Scripting

    The PDF Thumbnail Generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.3. This makes it possible for unauthenticated atta…

    kubiq PDF Thumbnail Generator Web / CMS
  • Medium 5.4
    CVE-2022-29431

    Remove CPT base <= 5.8 - CSRF leads to CPT base deletion

    Cross-Site Request Forgery (CSRF) vulnerability in KubiQ CPT base plugin <= 5.8 at WordPress allows an attacker to delete the CPT base.

    kubiq Remove CPT base (WordPress plugin) Web / CMS
  • Medium 4.7
    CVE-2022-29430

    WordPress PNG to JPG plugin <= 4.0 - Cross-Site Request Forgery (CSRF) leading to Persistent Cross-Site Scripting (XSS) vulnerability

    Cross-Site Scripting (XSS) vulnerability in KubiQ's PNG to JPG plugin <= 4.0 at WordPress via Cross-Site Request Forgery (CSRF). Vulnerable parameter &jpg_quality.

    kubiq PNG to JPG (WordPress plugin) Web / CMS
  • Unscored —
    CVE-2021-24386

    WP SVG Images < 3.4 - Authenticated (author+) Stored XSS via SVG

    The WP SVG images WordPress plugin before 3.4 did not sanitise the SVG files uploaded, which could allow low privilege users such as author+ to upload a malicious SVG and then perform XSS attacks by inducing another user to access the file directly. In v3.4, …

    kubiq WP SVG images Web / CMS