Read the docs

hostinger

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

hostinger records in CISA KEV

No hostinger vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Hostinger 1 record LOW

Records

3 records

TI-2023-06170 CVE-2023-6751 · GHSA-jjrq-h892-h3gx

Hostinger <= 1.9.7 - Missing Authorization to Maintenance Mode Activation

Priority LOW 32

The Hostinger plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability check on the function publish_website in all versions up to, and including, 1.9.7.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00449 Published 2024-01-11 No fix listed CWE-862
TI-2026-02141 CVE-2026-2515

Hostinger Reach <= 1.3.8 - Missing Authorization to Authenticated (Subscriber+) Integration API Key Update

Priority LOW 24

The Hostinger Reach – AI-Powered Email Marketing for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'handle_ajax_action' function in all version…

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00378 Published 2026-05-13 No fix listed CWE-862
Open these records in search →