Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: nerdpressteam Clear all filters
TI-2025-11442 CVE-2025-12471 · GHSA-wwqf-mr46-f48r

Hubbub Lite <= 1.36.0 - Reflected Cross-Site Scripting

Priority LOW 27

The Hubbub Lite – Fast, free social sharing and follow buttons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dpsp_list_attention_search' parameter in all versions up to, and including, 1.3…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00266 Published 2025-11-06 No fix listed CWE-79
TI-2024-02326 CVE-2024-2501 · GHSA-7p3m-6wwx-vgfx

Hubbub Lite – Fast, Reliable Social Network Sharing Buttons <= 1.33.1 - PHP Object Injection

Priority LOW 37

The Hubbub Lite – Fast, Reliable Social Sharing Buttons plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.33.1 via deserialization of untrusted input via the 'dpsp_maybe_u…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00921 Published 2024-04-09 No fix listed CWE-502