CVE-2026-28168

CubeWP versions up to 1.1.30 are vulnerable to a SQL injection flaw that allows attackers to manipulate database queries, potentially leading to unauthorized data access or modification. Organizations using this plugin should prioritize patching or upgrading to mitigate the risk of exploitation, given the high severity rating of this vulnerability.