Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: wpmudev Component: Hustle Clear all filters
TI-2024-07873 CVE-2024-8492 · GHSA-gh3q-hh33-59w3

Hustle < 7.8.5 - Admin+ Stored XSS

Priority MEDIUM 55

The Hustle WordPress plugin through 7.8.5 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfiltered_html is dis…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00362 Published 2025-05-15 No fix listed CWE-79
TI-2024-00335 CVE-2024-0368 · GHSA-5mfr-qw98-pxjr

Hustle <= 7.8.3 - Sensitive Information Exposure via Exposed Hubspot API Keys

Priority MEDIUM 45

The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.8.3 via hardcoded API Keys.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00783 Published 2024-03-13 No fix listed CWE-522