Advisories · Technology
wpmudev Hustle – Email Marketing, Lead Generation, Optins, Popups.
Every CVE that names wpmudev Hustle – Email Marketing, Lead Generation, Optins, Popups among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
Hustle <= 7.8.14.3 - Missing Authorization to Authenticated (Custom+) ESP Credential Overwrite and Irreversible OAuth Token Deletion via 'hustle_provider_migrate_hubspot' (and sibling migrate_*) AJAX…
- wpmudev Hustle – Email Marketing, Lead Generation, Optins, Popups
- Broken access control
- CVSS 4.9 Medium
Hustle <= 7.8.14.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'cta_label' Parameter
- wpmudev Hustle – Email Marketing, Lead Generation, Optins, Popups
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Hustle <= 7.8.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Module Content Title
- wpmudev Hustle – Email Marketing, Lead Generation, Optins, Popups
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Hustle – Email Marketing, Lead Generation, Optins, Popups <= 7.8.10.2 - Missing Authorization to Unauthenticated Conversion Tracking Data Manipulation
- wpmudev Hustle – Email Marketing, Lead Generation, Optins, Popups
- Broken access control
- CVSS 7.5 High
Hustle <= 7.8.9.2 - Authenticated (Subscriber+) Arbitrary File Upoload via Module Import
- wpmudev Hustle – Email Marketing, Lead Generation, Optins, Popups
- Unrestricted file upload
- CVSS 5.3 Medium
Hustle – Email Marketing, Lead Generation, Optins, Popups <= 7.8.5 - Missing Authorization to Unauthorized Form Submission
- wpmudev Hustle – Email Marketing, Lead Generation, Optins, Popups
- Broken access control
- CVSS 4.3 Medium
Hustle – Email Marketing, Lead Generation, Optins, Popups <= 7.8.5 - Missing Authorization to Unpublished Form Exposure
- wpmudev Hustle – Email Marketing, Lead Generation, Optins, Popups
- Broken access control
- CVSS 8.6 High
Hustle <= 7.8.3 - Sensitive Information Exposure via Exposed Hubspot API Keys
- wpmudev Hustle – Email Marketing, Lead Generation, Optins, Popups
- Hard-coded credentials