Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

WPKube — Vulnerabilities & Security Advisories 16

Browse all 16 CVE security advisories affecting WPKube. AI-powered Chinese analysis, POCs, and references for each vulnerability.

WPKube is a WordPress resource hub providing tutorials, plugins, and themes to enhance website functionality. Historically, its offerings have been associated with multiple security vulnerabilities, including cross-site scripting (XSS), remote code execution (RCE), and privilege escalation flaws. The platform has recorded 15 CVEs, with several critical issues allowing attackers to bypass security controls, execute arbitrary code, or gain unauthorized administrative access. While no major public security incidents have been widely documented, the consistent pattern of vulnerabilities in its extensions suggests potential risks for users implementing these resources without proper hardening or regular updates.

CVE ID Title CVSS Severity Published
CVE-2026-32469 WordPress CAPTCHA 4WP plugin <= 7.6.0 - Captcha Bypass vulnerability — CAPTCHA 4WP CWE-290 5.3 Medium 2026-08-06
CVE-2026-4409 Subscribe To Comments Reloaded <= 240119 - Improper Authorization to Unauthenticated Arbitrary Subscription Management — Subscribe To Comments Reloaded CWE-200 6.5 Medium 2026-05-05
CVE-2025-69011 WordPress Cool Tag Cloud plugin <= 2.29 - Cross Site Scripting (XSS) vulnerability — Cool Tag Cloud CWE-79 6.5 Medium 2026-02-20
CVE-2025-13614 Cool Tag Cloud <= 2.29 - Authenticated (Contributor+) Stored Cross-Site Scripting — Cool Tag Cloud CWE-79 8.1 High 2025-12-05
CVE-2025-12010 Authors List <= 2.0.6.1 - Authenticated (Contributor+) Sensitive Information Exposure via Limited Method Call in Plugin's Shortcode — Authors List CWE-200 6.5 Medium 2025-11-11
CVE-2025-58792 WordPress Authors List plugin <= 2.0.6.2 - Cross Site Request Forgery (CSRF) vulnerability — Authors List CWE-352 4.3 Medium 2025-09-05
CVE-2025-58790 WordPress Kiwi Plugin <= 2.1.8 - Cross Site Scripting (XSS) Vulnerability — Kiwi CWE-79 6.5 Medium 2025-09-05
CVE-2024-13806 Authors List <= 2.0.6 - Unauthenticated Arbitrary Shortcode Execution — Authors List CWE-94 6.5 Medium 2025-03-01
CVE-2024-10952 Authors List <= 2.0.4 - Unauthenticated Arbitrary Shortcode Execution via update_authors_list_ajax — Authors List CWE-94 7.3 High 2024-12-04
CVE-2024-3228 Social Sharing Plugin – Kiwi <= 2.1.7 - Information Disclosure — Social Sharing Plugin – Kiwi CWE-200 5.3 Medium 2024-07-09
CVE-2024-4144 Simple Basic Contact Form <= 20240502 - Unauthenticated Arbitrary Shortcode Execution — Simple Basic Contact Form CWE-94 6.5 Medium 2024-05-14
CVE-2024-4150 Simple Basic Contact Form <= 20221201 - Reflected Cross-Site Scripting — Simple Basic Contact Form CWE-79 6.1 Medium 2024-05-09
CVE-2024-31249 WordPress Subscribe To Comments Reloaded plugin <= 220725 - Sensitive Data Exposure vulnerability — Subscribe To Comments Reloaded CWE-532 5.3 Medium 2024-04-10
CVE-2023-37981 WordPress Authors List Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS) — Authors List CWE-79 7.1 High 2023-07-27
CVE-2021-4362 WordPress Plugin Kiwi Social Share 安全漏洞 — Social Sharing Plugin – Kiwi 9.8 Critical 2023-06-07
CVE-2022-29414 WordPress Subscribe To Comments Reloaded plugin <= 211130 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities — Subscribe To Comments Reloaded (WordPress plugin) CWE-352 5.4 Medium 2022-04-29

This page lists every published CVE security advisory associated with WPKube. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.