Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: HubSpot Component: Hubspot Clear all filters
TI-2024-05452 CVE-2024-5879 · GHSA-3826-h8f4-w96h

Cross-site scripting in hubspotdev HubSpot All-In-One Marketing – Forms, Popups, Live Chat

Priority LOW 29

The HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' attribute of the HubSpot Meeting Widget in all versions up to, and includin…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00376 Published 2024-08-30 No fix listed CWE-79
TI-2022-01126 CVE-2022-1239 · GHSA-mqqr-fmxw-ghxx

HubSpot < 8.8.15 - Contributor+ Blind SSRF

Priority MEDIUM 41

The HubSpot WordPress plugin before 8.8.15 does not validate the proxy URL given to the proxy REST endpoint, which could allow users with the edit_posts capability (by default contributor and above) to perform SSRF attac…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01417 Published 2022-05-02 Fixed in 8.8.15 CWE-918