Read the docs

hubspotdev

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

hubspotdev records in CISA KEV

No hubspotdev vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-08478 CVE-2026-9656 · GHSA-3rq5-wph4-p3mg

Information disclosure in hubspotdev HubSpot All-In-One Marketing – Forms, Popups, Live…

Priority LOW 20

The HubSpot All-In-One Marketing – Forms, Popups, Live Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 11.3.62 via the wp_localize_script() / window.leadinC…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00264 Published 2026-07-17 No fix listed CWE-200
TI-2025-10783 CVE-2025-11762 · GHSA-rhxq-26gm-p3gp

Missing authorization in hubspotdev HubSpot All-In-One Marketing – Forms, Popups, Live…

Priority LOW 19

The HubSpot All-In-One Marketing - Forms, Popups, Live Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 11.3.32 via the leadin/public/admin/class-adminconsta…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00193 Published 2026-04-24 No fix listed CWE-862
Open these records in search →