Login Request a demo
QU
Product
Qubely
by Themeum · last CVE Jul 23, 2026
10
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 0High 1Medium 9Low 0
Severity
All severities10Critical0High1Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Qubely to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-24916
7.5
2%
Aug 7
The Qubely WordPress plugin before 1.8.6 allows unauthenticated user to send arbitrary e-mails to arbitrary addresses via the qubely_send_form_data AJAX action
Affected: before 1.8.6
CVE-2024-13228
6.5
0%
Mar 11
The Qubely – Advanced Gutenberg Blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.13 via the…
Affected: before 1.8.14
CVE-2021-25013
6.5
0%
Jan 24
The Qubely WordPress plugin before 1.7.8 does not have authorisation and CSRF check on the qubely_delete_saved_block AJAX action, and does not ensure that the block to be deleted…
Affected: before 1.7.8
CVE-2026-39638
5.9
0%
Apr 8
WordPress Qubely plugin <= 1.8.14 - Cross Site Scripting (XSS) vulnerability
Affected: through 1.8.14
CVE-2025-26767
5.4
0%
Feb 16
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Qubely qubely allows Stored XSS.This issue affects Qubely: from n/a…
Affected: before 1.8.13
CVE-2024-9601
5.4
0%
Feb 14
The Qubely – Advanced Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘align’ and 'UniqueID' parameter in all versions up to, and…
Affected: before 1.8.13
CVE-2023-0376
5.4
1%
Jan 16
The Qubely WordPress plugin before 1.8.5 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could…
Affected: before 1.8.5
CVE-2026-65531
4.8
0%
Jul 23
WordPress Qubely plugin <= 1.8.14 - Broken Access Control vulnerability
Affected: through 1.8.14
CVE-2025-58249
4.3
0%
Sep 22
WordPress Qubely Plugin <= 1.8.14 - Sensitive Data Exposure Vulnerability
Affected: through 1.8.14
CVE-2025-58663
4.3
0%
Sep 22
WordPress Qubely Plugin <= 1.8.14 - Broken Access Control Vulnerability
Affected: through 1.8.14
Showing 10