Read the docs

nerdpressteam

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

nerdpressteam records in CISA KEV

No nerdpressteam vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2024-02326 CVE-2024-2501 · GHSA-7p3m-6wwx-vgfx

Hubbub Lite – Fast, Reliable Social Network Sharing Buttons <= 1.33.1 - PHP Object Injection

Priority LOW 37

The Hubbub Lite – Fast, Reliable Social Sharing Buttons plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.33.1 via deserialization of untrusted input via the 'dpsp_maybe_u…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00921 Published 2024-04-09 No fix listed CWE-502
TI-2025-11442 CVE-2025-12471 · GHSA-wwqf-mr46-f48r

Hubbub Lite <= 1.36.0 - Reflected Cross-Site Scripting

Priority LOW 27

The Hubbub Lite – Fast, free social sharing and follow buttons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dpsp_list_attention_search' parameter in all versions up to, and including, 1.3…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00266 Published 2025-11-06 No fix listed CWE-79
Open these records in search →