All products
wordpress-popup
WordPress · Plugin15 reports| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|
| Hustle <= 7.8.14.3 - Missing Authorization to Authenticated (Custom+) ESP Credential Overwrite and Irreversible OAuth Token Deletion via 'hustle_provider_migrate_hubspot' (and sibling migrate_*) AJAX ActionCVE-2026-109386 |
wordpress-popup |
WordPress |
Medium
|
Fix reported |
|
| Hustle <= 7.8.14.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'cta_label' ParameterCVE-2026-118169 |
wordpress-popup |
WordPress |
Medium
|
Fix reported |
|
| Hustle <= 7.8.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Module Content TitleCVE-2026-107710 |
wordpress-popup |
WordPress |
Medium
|
Fix reported |
|
| Hustle – Email Marketing, Lead Generation, Optins, Popups <= 7.8.14.2 - Missing AuthorizationCVE-2026-103075 |
wordpress-popup |
WordPress |
Medium
|
Fix reported |
|
| Hustle – Email Marketing, Lead Generation, Optins, Popups < 7.8.14.2 - Unauthenticated Arbitrary Shortcode ExecutionCVE-2026-80440 |
wordpress-popup |
WordPress |
Medium
|
Fix reported |
|
| Hustle – Email Marketing, Lead Generation, Optins, Popups <= 7.8.10.1 - Missing AuthorizationCVE-2026-25431 |
wordpress-popup |
WordPress |
Medium
|
Fix reported |
|
| Hustle – Email Marketing, Lead Generation, Optins, Popups <= 7.8.10.2 - Missing Authorization to Unauthenticated Conversion Tracking Data ManipulationCVE-2026-2263 |
wordpress-popup |
WordPress |
Medium
|
Fix reported |
|
| Hustle <= 7.8.9.2 - Unauthenticated Information ExposureCVE-2026-24998 |
wordpress-popup |
WordPress |
Medium
|
Fix reported |
|
| Hustle <= 7.8.9.2 - Authenticated (Subscriber+) Arbitrary File Upoload via Module ImportCVE-2026-0911 |
wordpress-popup |
WordPress |
High
|
Fix reported |
|
| Hustle – Email Marketing, Lead Generation, Optins, Popups <= 7.8.5 - Missing Authorization to Unauthorized Form SubmissionCVE-2024-10580 |
wordpress-popup |
WordPress |
Medium
|
Fix reported |
|
| Hustle – Email Marketing, Lead Generation, Optins, Popups <= 7.8.5 - Missing Authorization to Unpublished Form ExposureCVE-2024-10579 |
wordpress-popup |
WordPress |
Medium
|
Fix reported |
|
| Hustle <= 7.8.4 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2024-8492 |
wordpress-popup |
WordPress |
Medium
|
Fix reported |
|
| Hustle <= 7.8.3 - Sensitive Information Exposure via Exposed Hubspot API KeysCVE-2024-0368 |
wordpress-popup |
WordPress |
High
|
Fix reported |
|
| Hustle <= 7.6.4 = Authenticated (Administrator+) Stored Cross-Site Scripting |
wordpress-popup |
WordPress |
Medium
|
Fix reported |
|
| Hustle <= 6.0.7 - Unauthenticated CSV InjectionCVE-2019-11872 |
wordpress-popup |
WordPress |
High
|
Fix reported |
|
