VulnSocial

CVE-2021-24916Disclosure(themeum / qubely)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The Qubely WordPress plugin before 1.8.6 allows unauthenticated user to send arbitrary e-mails to arbitrary addresses via the qubely_send_form_data AJAX action.

themeum CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Exploit / PoC references

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • qubely

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
themeum
Products
qubely

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-06-07: 1Technical Details · 2026-06-07: 106-07
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • pdnuclei-bot@pdnuclei_bot
    Disclosure

    🚨 CVE-2021-24916 - high 🚨 WordPress Qubely < 1.8.6 - Unauthenticated Email Sending > Qubely WordPress plugin < 1.8.6 contains an insecure deserialization caused by unauth... 👾 https://cloud.projectdiscovery.io/library/CVE-2021-24916 @pdnuclei #NucleiTemplates #cve

    Post summary

    The tweet announces CVE-2021-24916, detailing an unauthenticated email sending vulnerability via insecure deserialization in Qubely WordPress plugin versions below 1.8.6, and directs readers to a Project Discovery resource for more information.

    0001066
    952 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appthemeumqubely-wordpress-

Explore more

Back to dashboardthemeum CVEsqubely vulnerabilities