Medium severity4.3NVD Advisory· Published Mar 11, 2025· Updated Jun 17, 2026

CVE-2024-13228

Description

The Qubely – Advanced Gutenberg Blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.13 via the 'qubely_get_content'. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, scheduled, password-protected, draft, and trashed post data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Themeum/Qubely
cpe:2.3:a:themeum:qubely:*:*:*:*:*:wordpress:*:*
Range: <1.8.14
WordPress/Qubelyllm-fuzzy2 versions
<=1.8.13+ 1 more
- (no CPE)range: <=1.8.13
- (no CPE)
Package: https://wordpress.org/plugins/qubely
themeum/Qubely – Advanced Gutenberg Blocksv5
Range: 0

Patches

Vulnerability mechanics

References

plugins.trac.wordpress.org/changeset/3253223/nvdPatch
www.wordfence.com/threat-intel/vulnerabilities/id/72c66e71-dddb-4142-ae13-da3caffd8714nvdThird Party Advisory
plugins.trac.wordpress.org/browser/qubely/trunk/core/QUBELY.phpnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000