Devpups

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Devpups records in CISA KEV

No Devpups vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Social Pug 3 records MEDIUM

Records

3 records in Social Pug · all components

TI-2024-09405 CVE-2024-10145 · GHSA-w3jx-4fjp-hqjc

Hubbub Lite < 1.34.4 - Admin+ Stored XSS

MEDIUM 55

The Hubbub Lite WordPress plugin before 1.34.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilter…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00326 Published 2025-05-15 Fixed in 1.34.4 CWE-79

TI-2016-08776 CVE-2016-10736 · GHSA-f86v-p36v-x43x

The "Social Pug - Easy Social Share Buttons" plugin before 1.2.6 for WordPress allows XSS…

LOW 29

The "Social Pug - Easy Social Share Buttons" plugin before 1.2.6 for WordPress allows XSS via the wp-admin/admin.php?page=dpsp-toolkit dpsp_message_class parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01105 Published 2019-01-09 No fix listed CWE-79

TI-2024-01423 CVE-2024-1526 · GHSA-hv4g-gwhx-j629

Hubbub Lite < 1.33.1 - Unauthenticated Password Protected Posts Access

LOW 25

The Hubbub Lite WordPress plugin before 1.33.1 does not ensure that user have access to password protected post before displaying its content in a meta tag.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00516 Published 2024-04-01 Fixed in 1.33.1

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0