PatchTheCVEqubely vulnerabilities and fixes
Recent CVEs affecting qubely, with upgrade or downgrade steps. 3 tracked.
qubely has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2025-03-11. Highest priority: CVE-2024-9601 (score 29/100).
- CVE-2025-26767 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum
- CVE-2024-9601 MEDIUM 6.5 UPGRADE The Qubely – Advanced Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via t
- CVE-2024-13228 MEDIUM 4.3 UPGRADE The Qubely – Advanced Gutenberg Blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in
FAQ
How do I fix qubely vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is qubely being exploited right now?
None of the tracked qubely CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which qubely CVE should I patch first?
CVE-2024-9601 currently ranks highest (29/100): The Qubely – Advanced Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via t.