THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-13339 (HIGH 7.5) — The CubeWP Framework plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.30 via the 'cubewp_get_svg_content' function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which

[NVD] CVE-2026-13339 (HIGH 7.5) — The CubeWP Framework plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.30 via the 'cubewp_get_svg_content' function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which

mednvdPublished 2026-08-02

CVE-2026-13339 CVSS: 7.5 HIGH Published: 2026-08-02T00:16:22.760

The CubeWP Framework plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.30 via the 'cubewp_get_svg_content' function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. This is exploitabl

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-13339