ByteOS Network

CVE Vulnerability Details :

CVE-2026-13339

PUBLISHED

More Info Official Page

Assigner-Wordfence

Assigner Org ID-b15e7b5b-3da4-40ae-a43c-f7aa60e62599

Published At-01 Aug, 2026 | 23:29

Updated At-01 Aug, 2026 | 23:29

▼CVE Numbering Authority (CNA)

CubeWP Framework <= 1.1.30 - Unauthenticated Arbitrary File Read via prev_icon/next_icon Parameter

The CubeWP Framework plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.30 via the 'cubewp_get_svg_content' function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. This is exploitable by unauthenticated attackers because the required nonce is publicly emitted into the markup of any page rendering the CubeWP posts shortcode or widget with AJAX loading enabled, making it harvestable by any guest visitor before submitting the AJAX request.

Affected Products

Vendor

cubewp1211

Product

CubeWP Framework

Default Status

unaffected

Versions

Affected

From 0 through 1.1.30 (semver)

Problem Types

Type	CWE ID	Description
CWE	CWE-22	CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Type: CWE

CWE ID: CWE-22

Description: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Metrics

Version	Base score	Base severity	Vector
3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Version: 3.1

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Credits

finder

Nhien Pham (nhienit)

Timeline

Event	Date
Vendor Notified	2026-06-25 14:16:56
Disclosed	2026-08-01 10:44:26

Event: Vendor Notified

Date: 2026-06-25 14:16:56

Event: Disclosed

Date: 2026-08-01 10:44:26

References

Hyperlink	Resource
https://www.wordfence.com/threat-intel/vulnerabilities/id/7ea72320-0e1e-45e3-987d-9ab7eecf1aee?source=cve	N/A
https://plugins.trac.wordpress.org/browser/cubewp-framework/tags/1.1.30/cube/functions/admin-functions.php#L1170	N/A
https://plugins.trac.wordpress.org/changeset/3627738/cubewp-framework	N/A

Hyperlink: https://www.wordfence.com/threat-intel/vulnerabilities/id/7ea72320-0e1e-45e3-987d-9ab7eecf1aee?source=cve

Resource: N/A

Hyperlink: https://plugins.trac.wordpress.org/browser/cubewp-framework/tags/1.1.30/cube/functions/admin-functions.php#L1170

Resource: N/A

Hyperlink: https://plugins.trac.wordpress.org/changeset/3627738/cubewp-framework

Resource: N/A

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References