CVE-2025-68036 - WordPress CubeWP plugin <= 1.1.27 - broken access control vulnerability

CVE-2025-68036 - WordPress CubeWP plugin <= 1.1.27 - broken access control vulnerability

CVE ID : CVE-2025-68036 Published : Dec. 29, 2025, 11:26 p.m. | 45 minutes ago Description : Missing Authorization vulnerability in Emraan Cheema CubeWP allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects CubeWP: from n/a through 1.1.27. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
HIGH
Published
Dec. 29, 2025

Source: Telegram CVE Monitor