Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: NerdPress Clear all filters
TI-2025-35859 CVE-2025-58007 · GHSA-9778-hpmv-mx63

WordPress Social Pug Plugin <= 1.35.2 - Sensitive Data Exposure Vulnerability

Priority LOW 20

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NerdPress Hubbub Lite social-pug allows Retrieve Embedded Sensitive Data.This issue affects Hubbub Lite: from n/a through <= 1.3…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00292 Published 2025-09-22 No fix listed CWE-497
TI-2023-26852 CVE-2023-49193 · GHSA-h49h-j7pc-4p78

WordPress Grow Social plugin <= 1.30.0 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in NerdPress Hubbub Lite social-pug allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hubbub Lite: from n/a through <= 1.30.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0047 Published 2024-12-09 No fix listed CWE-862
TI-2024-08540 CVE-2024-9204 · GHSA-8q9m-fx9g-p437

Smart Custom 404 Error Page <= 11.4.7 - Reflected Cross-Site Scripting

Priority LOW 28

The Smart Custom 404 Error Page plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via $_SERVER['REQUEST_URI'] in all versions up to, and including, 11.4.7 due to insufficient input sanitization and out…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00462 Published 2024-10-04 No fix listed CWE-79