Sensitive Information Exposure in Qubely Plugin for WordPress

CVE-2024-13228

What is CVE-2024-13228?

The Qubely – Advanced Gutenberg Blocks plugin for WordPress has a vulnerability that allows authenticated attackers with Contributor-level access or higher to exploit the 'qubely_get_content' function. This exposure can enable attackers to access sensitive data, including private, pending, scheduled, password-protected, draft, and trashed posts, endangering the confidentiality and integrity of user content. It is crucial for users to update their plugins to mitigate the risk associated with this vulnerability.

References