CVE-2026-17017

A vulnerability exists in the CubeWP Framework WordPress plugin prior to version 1.1.31, where user input is inadequately sanitized before being integrated into database queries via an AJAX function. This oversight enables individuals with a subscriber role or higher to execute malicious SQL commands, compromising the security of the affected system.

Based on public CVE data (MITRE/NVD).