Vulnerabilities

TI-2026-01573 CVE-2026-1908 · GHSA-rww4-4g7g-fx67

Cross-site scripting in minnur Integration with Hubspot Forms

LOW 28

The Integration with Hubspot Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'hubspotform' shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitization and…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0025 Published 2026-03-21 No fix listed CWE-79

TI-2025-31383 CVE-2025-49335 · GHSA-cgqh-2w33-h8jq

WordPress External Media plugin <= 1.0.36 - Server Side Request Forgery (SSRF) vulnerability

LOW 21

Server-Side Request Forgery (SSRF) vulnerability in minnur External Media external-media allows Server Side Request Forgery.This issue affects External Media: from n/a through <= 1.0.36.

CVSS 3.1MEDIUM 4.9 Network Low privileges No interaction EPSS 0.00142 Published 2026-01-07 No fix listed CWE-918

Vulnerabilities

Filters

Cross-site scripting in minnur Integration with Hubspot Forms

WordPress External Media plugin <= 1.0.36 - Server Side Request Forgery (SSRF) vulnerability