Skip to content
PluginCanary

CubeWP Framework

by Imran Tauqeer · 3,000+ active installs · Checked 3 Nov 2026
Watch1 Warning

Watch: vulnerability published 13 Aug 2026, fixed in 1.1.31.

79/ 100 Canary Score
Sub-scores for CubeWP Framework
Ownership100
Maintenance90
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 13 Aug 2026, fixed in 1.1.31. Update to version 1.1.31 or later.13 Aug 2026Evidence
  • InfoSEC-314 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master29 Sep 2022 to 29 Sep 2022, 1 commits
cubewp121130 Sep 2022 to 29 Jul 2026, 204 commits
ahmadcheema25 Aug 2023 to 5 Mar 2024, 11 commits
teamcubewp4 Sep 2023 to 24 Apr 2024, 11 commits

4 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
3 months ago
Releases, 24 months
10
Tested up to
7.0 vs 7.1
Requires PHP
7.4 supported 8.2+
Releases per quarter for CubeWP Framework
Q1 20241
Q2 20242
Q3 20245
Q4 20246
Q1 20250
Q2 20251
Q3 20253
Q4 20251
Q1 20261
Q2 20261
Q3 20261
Q4 20260

Last release 29 Jul 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Support

0% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
13 Aug 2026CubeWP <= 1.1.30 - Authenticated (Subscriber+) SQL Injection6.5<= 1.1.301.1.310
5 Aug 2026CubeWP Framework <= 1.1.30 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Post and User Meta Disclosure4.3<= 1.1.30Not affectedn/a
4 Aug 2026CubeWP Framework <= 1.1.30 - Authenticated (Subscriber+) SQL Injection6.5<= 1.1.301.1.310
1 Aug 2026CubeWP Framework <= 1.1.30 - Unauthenticated Arbitrary File Read via prev_icon/next_icon Parameter7.5<= 1.1.301.1.310
31 Jul 2026CubeWP Framework <= 1.1.30 - Authenticated (Subscriber+) SQL Injection via 'relation_id' Parameter6.5<= 1.1.301.1.310
24 Jan 2026CubeWP – All-in-One Dynamic Content Framework <= 1.1.27 - Unauthenticated Post Disclosure in class-cubewp-search-ajax-hooks.php4.3<= 1.1.271.1.280
16 Jan 2026CubeWP <= 1.1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via cubewp_shortcode_taxonomy Shortcode6.4<= 1.1.261.1.270
16 Jan 2026CubeWP – All-in-One Dynamic Content Framework <= 1.1.27 - Unauthenticated Information Exposure5.3<= 1.1.271.1.280
26 Dec 2025CubeWP <= 1.1.27 - Missing Authorization5.3<= 1.1.271.1.280
22 Sep 2025CubeWP <= 1.1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.1.261.1.270
19 Aug 2025CubeWP Framework <= 1.1.24 - Authenticated (Subscriber+) Privilege Escalation8.8<= 1.1.241.1.250
12 Jun 2025CubeWP Framework <= 1.1.23 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.1.231.1.240
10 Jun 2025CubeWP – All-in-One Dynamic Content Framework <= 1.1.23 - Authenticated (Subscriber+) Privilege Escalation8.8<= 1.1.231.1.240
5 Jun 2025CubeWP – All-in-One Dynamic Content Framework <= 1.1.24 - Cross-Site Request Forgery4.3<= 1.1.24Not affectedn/a
9 Oct 2024CubeWP – All-in-One Dynamic Content Framework <= 1.1.15 - Missing Authorization5.4<= 1.1.151.1.160
28 Mar 2024CubeWP – All-in-One Dynamic Content Framework <= 1.1.12 - Authenticated (Subscriber+) Arbitrary File Upload9.9<= 1.1.121.1.130

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.8 from 12 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star11
4 star0
3 star0
2 star1
1 star0

Momentum

3,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for CubeWP Framework
4 May 2026901
11 May 2026348
18 May 2026499
25 May 2026225
1 Jun 2026194
8 Jun 2026184
15 Jun 2026158
22 Jun 2026150
29 Jun 2026159
6 Jul 2026178
13 Jul 2026138
20 Jul 2026144
27 Jul 20261,288
3 Aug 20261,137
10 Aug 2026367
17 Aug 2026250
24 Aug 2026270
31 Aug 2026287
7 Sep 2026205
14 Sep 2026200
21 Sep 2026247
28 Sep 2026247
5 Oct 2026330
12 Oct 2026524
19 Oct 2026416
26 Oct 2026427
2 Nov 202666

Weekly downloads over the last 4 weeks are 1% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

ACF Content Analysis for Yoast SEOScore 91 · 100,000+Image Aspect Ratio Crop Field for Advanced Custom FieldsScore 91 · 20,000+Custom Post Types and Custom Fields creator - WCKScore 91 · 10,000+Genesis Custom BlocksScore 91 · 10,000+WPGraphQL for ACFScore 91 · 10,000+

Facts

Version1.1.31
AuthorImran Tauqeer
Added30 Sep 2022
Last updated29 Jul 2026
Active installs3,000+
Requires WordPress6.5
Tested up to7.0.8
Requires PHP7.4
CategoryDeveloper Tools & Customization > Code Snippets & Custom Code
Tagsacf, metabox, custom fields, custom post types, Custom Taxonomies

Other plugins by this author: CubeWP Forms, CubeWP Wallet

Questions

Is CubeWP Framework still maintained?

CubeWP Framework was last updated on 29 Jul 2026. Its Canary status is Watch.

Is CubeWP Framework safe?

CubeWP Framework has no open unpatched vulnerabilities on record. 14 vulnerabilities were published in the last 24 months. Its Canary status is Watch.

Who owns CubeWP Framework?

The wordpress.org author is Imran Tauqeer. Recent committers: cubewp1211, teamcubewp, ahmadcheema, plugin-master. We have recorded no ownership change.

What can I use instead of CubeWP Framework?

Plugins in the same category with a higher Canary Score: ACF Content Analysis for Yoast SEO, Image Aspect Ratio Crop Field for Advanced Custom Fields, Custom Post Types and Custom Fields creator - WCK, Genesis Custom Blocks, WPGraphQL for ACF.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue