Hubspot vulnerabilities

Products

• Jinjava 4
• Hubspot 3

Newest

• hubspot WordPress HubSpot plugin <= 11.3.51 - Sensitive Data Exposure vulnerability CVE-2026-57736 7.4 HighJuly 1, 2026
• hubspot jinjava JinJava Bypass through ForTag leads to Arbitrary Java Execution CVE-2026-25526 Public exploitFix available 9.8 CriticalFebruary 3, 2026
• hubspot jinjava jinjava Sandbox Bypass via JavaType-Based Deserialization CVE-2025-59340 Fix available 9.8 CriticalSeptember 17, 2025
• hubspot, hubspotdev hubspot all-in-one marketing – forms, popups, live chat +1 more HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics <= 11.1.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via HubSpot Meeting Widget CVE-2024-5879 6.4 MediumAugust 30, 2024
• hubspot, unknown hubspot – crm, email marketing, live chat, forms & analytics +1 more HubSpot < 8.8.15 - Contributor+ Blind SSRF CVE-2022-1239 8.8 HighMay 2, 2022
• hubspot jinjava Unauthorized access to Class instance in Jinjava CVE-2020-12668 Fix available 6.5 MediumFebruary 19, 2021
• hubspot jinjava Jinjava calls getClass CVE-2018-18893 Public exploitFix available 5.3 MediumJanuary 3, 2019
• hubspot hubl-server, hackerone hubl-server node module +1 more hubl-server downloads resources over HTTP CVE-2017-16035 8.1 HighJune 4, 2018