CVE-2026-17017

The CVE-2026-17017 entry concerns the CubeWP Framework WordPress plugin prior to version 1.1.31. The vulnerability arises from insufficient sanitization/escaping of a parameter used in an SQL statement within an AJAX action and the absence of a capability check on that action. This combination al...