Vulnerabilities

TI-2024-09405 CVE-2024-10145 · GHSA-w3jx-4fjp-hqjc

Hubbub Lite < 1.34.4 - Admin+ Stored XSS

MEDIUM 55

The Hubbub Lite WordPress plugin before 1.34.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilter…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00326 Published 2025-05-15 Fixed in 1.34.4 CWE-79

TI-2024-01423 CVE-2024-1526 · GHSA-hv4g-gwhx-j629

Hubbub Lite < 1.33.1 - Unauthenticated Password Protected Posts Access

LOW 25

The Hubbub Lite WordPress plugin before 1.33.1 does not ensure that user have access to password protected post before displaying its content in a meta tag.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00516 Published 2024-04-01 Fixed in 1.33.1

TI-2016-08776 CVE-2016-10736 · GHSA-f86v-p36v-x43x

The "Social Pug - Easy Social Share Buttons" plugin before 1.2.6 for WordPress allows XSS…

LOW 29

The "Social Pug - Easy Social Share Buttons" plugin before 1.2.6 for WordPress allows XSS via the wp-admin/admin.php?page=dpsp-toolkit dpsp_message_class parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01105 Published 2019-01-09 No fix listed CWE-79

Vulnerabilities

Filters

Hubbub Lite < 1.34.4 - Admin+ Stored XSS

Hubbub Lite < 1.33.1 - Unauthenticated Password Protected Posts Access

The "Social Pug - Easy Social Share Buttons" plugin before 1.2.6 for WordPress allows XSS…