Read the docs

wpmudev

Records121All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical12CVSS 9.0–10.0
CVSS high44CVSS 7.0–8.9

Exploited now

wpmudev records in CISA KEV

No wpmudev vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Forminator Forms 10 records MEDIUM Defender 4 records MEDIUM Branda 3 records LOW Defender Security 3 records MEDIUM Broken Link Checker 2 records LOW Custom Sidebars 2 records LOW Hustle 2 records MEDIUM Smush Image Compression And Optimization 2 records LOW

Records

2 records in Hustle · all components

TI-2024-07873 CVE-2024-8492 · GHSA-gh3q-hh33-59w3

Hustle < 7.8.5 - Admin+ Stored XSS

Priority MEDIUM 55

The Hustle WordPress plugin through 7.8.5 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfiltered_html is dis…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00362 Published 2025-05-15 No fix listed CWE-79
TI-2024-00335 CVE-2024-0368 · GHSA-5mfr-qw98-pxjr

Hustle <= 7.8.3 - Sensitive Information Exposure via Exposed Hubspot API Keys

Priority MEDIUM 45

The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.8.3 via hardcoded API Keys.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00783 Published 2024-03-13 No fix listed CWE-522
Open these records in search →