Sensitive Information Exposure in Qubely Plugin for WordPress
CVE-2024-13228
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 11 March 2025
What is CVE-2024-13228?
The Qubely β Advanced Gutenberg Blocks plugin for WordPress has a vulnerability that allows authenticated attackers with Contributor-level access or higher to exploit the 'qubely_get_content' function. This exposure can enable attackers to access sensitive data, including private, pending, scheduled, password-protected, draft, and trashed posts, endangering the confidentiality and integrity of user content. It is crucial for users to update their plugins to mitigate the risk associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Qubely β Advanced Gutenberg Blocks * <= 1.8.13
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved