Nerdpress vulnerabilities

Products

• Hubbub Lite 5

Newest

• nerdpress hubbub lite WordPress Hubbub Lite plugin <= 1.36.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-27403 6.5 MediumJuly 23, 2026
• nerdpress hubbub lite WordPress Social Pug Plugin <= 1.35.2 - Sensitive Data Exposure Vulnerability CVE-2025-58007 4.3 MediumSeptember 22, 2025
• nerdpress hubbub lite, devpups social pug +1 more Hubbub Lite < 1.34.4 - Admin+ Stored XSS CVE-2024-10145 4.8 MediumMay 15, 2025
• nerdpress hubbub lite, social pug wordpress +1 more WordPress Grow Social plugin <= 1.30.0 - Broken Access Control vulnerability CVE-2023-49193 5.3 MediumDecember 9, 2024
• nerdpress smart custom 404 error page Smart Custom 404 Error Page <= 11.4.7 - Reflected Cross-Site Scripting CVE-2024-9204 6.1 MediumOctober 4, 2024
• morehubbub hubbub lite, nerdpress hubbub lites, nerdpressteam hubbub lite – fast, free social sharing and follow buttons +2 more Hubbub Lite – Fast, Reliable Social Network Sharing Buttons <= 1.33.1 - PHP Object Injection CVE-2024-2501 7.5 HighApril 9, 2024
• nerdpress hubbub lite, devpups social pug +1 more Hubbub Lite < 1.33.1 - Unauthenticated Password Protected Posts Access CVE-2024-1526 5.3 MediumApril 1, 2024