Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: hubspotdev Clear all filters
TI-2026-08478 CVE-2026-9656 · GHSA-3rq5-wph4-p3mg

Information disclosure in hubspotdev HubSpot All-In-One Marketing – Forms, Popups, Live…

Priority LOW 20

The HubSpot All-In-One Marketing – Forms, Popups, Live Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 11.3.62 via the wp_localize_script() / window.leadinC…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00264 Published 2026-07-17 No fix listed CWE-200
TI-2025-10783 CVE-2025-11762 · GHSA-rhxq-26gm-p3gp

Missing authorization in hubspotdev HubSpot All-In-One Marketing – Forms, Popups, Live…

Priority LOW 19

The HubSpot All-In-One Marketing - Forms, Popups, Live Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 11.3.32 via the leadin/public/admin/class-adminconsta…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00193 Published 2026-04-24 No fix listed CWE-862