Description
Subscriber SQL Injection in CubeWP <= 1.1.30 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Imran Tauqeer | CubeWP | ≤ 1.1.30 | — |
High · 8.5
CVE-2026-28168
EUVD-2026-57954GHSA-6hwm-5426-rxg2
WordPress CubeWP plugin <= 1.1.30 - SQL Injection vulnerability
Published Aug 13, 2026 · Updated Aug 13, 2026 · Assigned by Patchstack