📦 Qubely

The Qubely WordPress plugin before version 1.8.6 contains an unauthenticated email injection vulnerability. Unauthenticated attackers can send arbitrary emails to any recipient address via the qubely_...

The Qubely WordPress plugin has a stored XSS vulnerability that allows authenticated attackers with Contributor access or higher to inject malicious scripts into website pages. These scripts execute w...