Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:qubely:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductQubely (7654a95a-03f5-5d40-9baf-d8685a0ff1ab)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-0376 vulnerable 2026-06-08 05:52:04.844285 Qubely < 1.8.5 - Contributor+ Stored XSS
The Qubely WordPress plugin before 1.8.5 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Published: 2024-01-16T15:55:51.086Z
Updated: 2025-06-02T15:09:50.638Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24916 vulnerable 2026-06-08 05:30:39.619180 Qubely < 1.8.6 - Unauthenticated Arbitrary E-mail Sending
The Qubely WordPress plugin before 1.8.6 allows unauthenticated user to send arbitrary e-mails to arbitrary addresses via the qubely_send_form_data AJAX action.
Published: 2023-08-07T14:31:23.983Z
Updated: 2024-10-15T18:12:07.814Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.