CVE-2025-12129 | CubeWP Plugin up to 1.1.27 on WordPress REST API Endpoint query-new information disclosure

A vulnerability was found in CubeWP Plugin up to 1.1.27 on WordPress. It has been rated as problematic. This vulnerability affects unknown code of the file /cubewp-posts/v1/query-new of the component REST API Endpoint. The manipulation leads to information disclosure.

This vulnerability is listed as CVE-2025-12129. The attack may be initiated remotely. There is no available exploit.