Qubely – Advanced Gutenberg Blocks

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Qubely – Advanced Gutenberg Blocks

Information

Software Type Plugin
Software Slug qubely (view on wordpress.org)
Software Status Active
Software Author themeum
Software Website www.themeum.com
Software Downloads 523,715
Software Active Installs 7,000
Software Record Last Updated August 8, 2026

12 Vulnerabilities

Submit a Vulnerability
Qubely – Advanced Gutenberg Blocks <= 1.8.14 - Missing Authorization
5.3
CVE-2026-65531
Jul 23, 2026
Researcher: Ananda Dhakal
Qubely <= 1.8.14 - Authenticated (Author+) Stored Cross-Site Scripting
6.4
CVE-2026-39638
Feb 14, 2026
Researcher: Athiwat Tiprasaharn (Jitlada)
Qubely <= 1.8.14 - Missing Authorization
5.4
CVE-2025-58663
Sep 22, 2025
Researcher: Denver Jackson
Qubely <= 1.8.14 - Authenticated (Contributor+) Sensitive Information Exposure
4.3
CVE-2025-58249
Sep 22, 2025
Researcher: Abu Hurayra (HurayraIIT)
Qubely – Advanced Gutenberg Blocks <= 1.8.13 - Authenticated (Contributor+) Sensitive Information Exposure via qubely_get_content
4.3
CVE-2024-13228
Mar 10, 2025
Researcher: Nishiv
Qubely <= 1.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-26767
Feb 14, 2025
Researcher: zaim
Qubely – Advanced Gutenberg Blocks <= 1.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' and 'UniqueID'
6.5
CVE-2024-9601
Feb 13, 2025
Researcher: Nishiv
Qubely – Advanced Gutenberg Blocks <= 1.8.5 - Insufficient Authorization
5.3
CVE-2021-24916
Jul 17, 2023
Researcher: Krzysztof Zając
Quebely <= 1.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'className' Block Option
6.4
CVE-2023-0376
Feb 6, 2023
Researcher: István Márton
Qubely <= 1.7.9 - Incorrect Authorization
5.4
CVE ID Unknown
Jun 14, 2022
Researcher: Jan w Oleju
Qubely <= 1.7.8 - Missing Authorization
5.4
CVE ID Unknown
Jun 6, 2022
Researcher: Jan w Oleju
Qubely <= 1.7.7 - Missing Authorization to Arbitrary Post Deletion
5.4
CVE-2021-25013
Dec 27, 2021
Researcher: Krzysztof Zając
Title Status CVE ID CVSS Researchers Date
Qubely – Advanced Gutenberg Blocks <= 1.8.14 - Missing Authorization Unpatched CVE-2026-65531 5.3 Ananda Dhakal July 23, 2026
Qubely <= 1.8.14 - Authenticated (Author+) Stored Cross-Site Scripting Unpatched CVE-2026-39638 6.4 Athiwat Tiprasaharn (Jitlada) February 14, 2026
Qubely <= 1.8.14 - Missing Authorization Unpatched CVE-2025-58663 5.4 Denver Jackson September 22, 2025
Qubely <= 1.8.14 - Authenticated (Contributor+) Sensitive Information Exposure Unpatched CVE-2025-58249 4.3 Abu Hurayra (HurayraIIT) September 22, 2025
Qubely – Advanced Gutenberg Blocks <= 1.8.13 - Authenticated (Contributor+) Sensitive Information Exposure via qubely_get_content Patched CVE-2024-13228 4.3 Nishiv March 10, 2025
Qubely <= 1.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-26767 6.4 zaim February 14, 2025
Qubely – Advanced Gutenberg Blocks <= 1.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' and 'UniqueID' Patched CVE-2024-9601 6.5 Nishiv February 13, 2025
Qubely – Advanced Gutenberg Blocks <= 1.8.5 - Insufficient Authorization Patched CVE-2021-24916 5.3 Krzysztof Zając July 17, 2023
Quebely <= 1.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'className' Block Option Patched CVE-2023-0376 6.4 István Márton February 6, 2023
Qubely <= 1.7.9 - Incorrect Authorization Patched 5.4 Jan w Oleju June 14, 2022
Qubely <= 1.7.8 - Missing Authorization Patched 5.4 Jan w Oleju June 6, 2022
Qubely <= 1.7.7 - Missing Authorization to Arbitrary Post Deletion Patched CVE-2021-25013 5.4 Krzysztof Zając December 27, 2021

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation