What’s Vulnerable › Products

Themeum Qubely vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your Themeum Qubely version is affected

Latest Themeum Qubely vulnerabilities

• CVE-2026-65531 — WordPress Qubely plugin <= 1.8.14 - Broken Access Control vulnerability (CVSS 4.8)
• CVE-2026-39638 — WordPress Qubely plugin <= 1.8.14 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
• CVE-2025-58663 — WordPress Qubely Plugin <= 1.8.14 - Broken Access Control Vulnerability (CVSS 4.3)
• CVE-2025-58249 — WordPress Qubely Plugin <= 1.8.14 - Sensitive Data Exposure Vulnerability (CVSS 4.3)
• CVE-2024-13228 — Qubely – Advanced Gutenberg Blocks <= 1.8.13 - Authenticated (Contributor+) Sensitive Information Exposure via qubely_get_content (CVSS 6.5)
• CVE-2025-26767 — WordPress Qubely plugin <= 1.8.12 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2024-9601 — Qubely – Advanced Gutenberg Blocks <= 1.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' and 'UniqueID' (CVSS 5.4)
• CVE-2023-0376 — Qubely < 1.8.5 - Contributor+ Stored XSS (CVSS 5.4)
• CVE-2021-24916 — Qubely < 1.8.6 - Unauthenticated Arbitrary E-mail Sending (CVSS 7.5)
• CVE-2021-25013 — Qubely < 1.7.8 - Subscriber+ Arbitrary Post Deletion (CVSS 6.5)