Avoid: vulnerability published 23 Jul 2026 still has no fix after 14 days.
Capped at 39: a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 20 |
| Security | 5 |
| Support | 70 |
| Reputation | 70 |
Quick answers
- Is Qubely still maintained?
- No. Last release 10 Mar 2025, over 1 year ago. 10 Mar 2025 · wordpress.org
- Who owns Qubely, and has it changed hands?
- No change recorded. Main committer themeum since Mar 2019. 3 Nov 2026 · SVN log
- Was Qubely removed from wordpress.org?
- No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
- Is Qubely safe?
- No. 4 known vulnerabilities have no fix in the current version. 23 Jul 2026 · Wordfence Intelligence
- Is the latest Qubely update safe to install?
- No ownership change before 1.8.14. No one-star spike after it. 10 Mar 2025 · Release history
Active signals
Facts we detected, with links to the source.
- CriticalSEC-2Vulnerability published 23 Jul 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.6 Aug 2026Evidence
- CriticalSEC-2Vulnerability published 14 Feb 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.28 Feb 2026Evidence
- CriticalSEC-2Vulnerability published 22 Sep 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.6 Oct 2025Evidence
- CriticalSEC-2Vulnerability published 22 Sep 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.6 Oct 2025Evidence
- WarningMNT-2Tested up to WordPress 6.7.11, 4 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
- WarningMNT-1No release in 20 months (last release 10 Mar 2025). Plan a replacement if the plugin is important to your site.10 Mar 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| plugin-master | 9 Feb 2019 to 9 Feb 2019, 1 commits |
|---|---|
| themeum | 1 Mar 2019 to 10 Mar 2025, 116 commits |
2 committers recorded. No ownership change since 2019.
Maintenance
- Last release
- 20 months ago
- Releases, 24 months
- 2
- Tested up to
- 6.7 vs 7.1
- Requires PHP
- 7.0 supported 8.2+
| Q1 2024 | 1 |
|---|---|
| Q2 2024 | 1 |
| Q3 2024 | 1 |
| Q4 2024 | 0 |
| Q1 2025 | 2 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 10 Mar 2025. Tested up to 6.7, 4 major versions behind WordPress 7.1.
Reputation
Last 90 days: no reviews. Lifetime: 4.0.
| 5 star | 45 |
|---|---|
| 4 star | 5 |
| 3 star | 2 |
| 2 star | 1 |
| 1 star | 13 |
Security record
7 vulnerabilities in 24 months (12 on record), 4 with no fix in the current version.
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 23 Jul 2026 | Qubely - Advanced Gutenberg Blocks <= 1.8.14 - Missing Authorization | 5.3 | <= 1.8.14 | No fix | n/a |
| 14 Feb 2026 | Qubely <= 1.8.14 - Authenticated (Author+) Stored Cross-Site Scripting | 6.4 | <= 1.8.14 | No fix | n/a |
| 22 Sep 2025 | Qubely <= 1.8.14 - Missing Authorization | 5.4 | <= 1.8.14 | No fix | n/a |
| 22 Sep 2025 | Qubely <= 1.8.14 - Authenticated (Contributor+) Sensitive Information Exposure | 4.3 | <= 1.8.14 | No fix | n/a |
Show 8 patched vulnerabilities
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
0% of 1 support threads resolved in the last 2 months.
Momentum
7,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 171 |
|---|---|
| 11 May 2026 | 149 |
| 18 May 2026 | 139 |
| 25 May 2026 | 158 |
| 1 Jun 2026 | 156 |
| 8 Jun 2026 | 153 |
| 15 Jun 2026 | 162 |
| 22 Jun 2026 | 135 |
| 29 Jun 2026 | 141 |
| 6 Jul 2026 | 156 |
| 13 Jul 2026 | 140 |
| 20 Jul 2026 | 150 |
| 27 Jul 2026 | 159 |
| 3 Aug 2026 | 204 |
| 10 Aug 2026 | 181 |
| 17 Aug 2026 | 167 |
| 24 Aug 2026 | 196 |
| 31 Aug 2026 | 163 |
| 7 Sep 2026 | 234 |
| 14 Sep 2026 | 190 |
| 21 Sep 2026 | 180 |
| 28 Sep 2026 | 209 |
| 5 Oct 2026 | 203 |
| 12 Oct 2026 | 189 |
| 19 Oct 2026 | 293 |
| 26 Oct 2026 | 298 |
| 2 Nov 2026 | 57 |
Weekly downloads over the last 4 weeks are 19% above the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
Facts
| Version | 1.8.14 |
|---|---|
| Author | Themeum |
| Added | 1 Mar 2019 |
| Last updated | 10 Mar 2025 |
| Active installs | 7,000+ |
| Requires WordPress | 5.3 |
| Tested up to | 6.7.11 |
| Requires PHP | 7.0 |
| Category | Design & Themes > Page Builders & Visual Editors |
| Tags | block, blocks, editor, gutenberg, gutenberg blocks |
Other plugins by this author: Kirki - Freeform Page Builder, Website Builder & Customizer, Tutor LMS - eLearning and online course solution, Tutor LMS Elementor Addons, TutorMate, WP Mega Menu, WP Crowdfunding, Tutor LMS - Migration Tool, Tutor LMS BunnyNet Integration, Tutor LMS Divi Modules, Certificate customizer for Tutor LMS, Oxygen Tutor LMS, Growfund - Ultimate Donation & Crowdfunding Solution
Questions
Is Qubely still maintained?
No. Last release 10 Mar 2025, over 1 year ago.
Who owns Qubely, and has it changed hands?
No change recorded. Main committer themeum since Mar 2019.
Was Qubely removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026.
Is Qubely safe?
No. 4 known vulnerabilities have no fix in the current version.
Is the latest Qubely update safe to install?
No ownership change before 1.8.14. No one-star spike after it.