Skip to content
Wpmudev Hustle vulnerabilities
-
wpmudev hustle – email marketing, lead generation, optins, popups
Hustle <= 7.8.14.3 - Missing Authorization to Authenticated (Custom+) ESP Credential Overwrite and Irreversible OAuth Token Deletion via 'hustle_provider_migrate_hubspot' (and sibling migrate_*) AJAX…
CVE-2026-109386
4.3 Medium
-
wpmudev hustle – email marketing, lead generation, optins, popups
Hustle <= 7.8.14.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'cta_label' Parameter
CVE-2026-118169
4.9 Medium
-
wpmudev hustle – email marketing, lead generation, optins, popups
Hustle <= 7.8.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Module Content Title
CVE-2026-107710
6.4 Medium
-
wpmudev hustle – email marketing, lead generation, optins, popups
Hustle – Email Marketing, Lead Generation, Optins, Popups <= 7.8.10.2 - Missing Authorization to Unauthenticated Conversion Tracking Data Manipulation
CVE-2026-2263
5.3 Medium
-
wpmudev hustle – email marketing, lead generation, optins, popups
Hustle <= 7.8.9.2 - Authenticated (Subscriber+) Arbitrary File Upoload via Module Import
CVE-2026-0911
Public exploit
7.5 High
-
unknown hustle
Hustle < 7.8.5 - Admin+ Stored XSS
CVE-2024-8492
4.8 Medium
-
wpmudev hustle, hustle – email marketing, lead generation, optins, popups +1 more
Hustle – Email Marketing, Lead Generation, Optins, Popups <= 7.8.5 - Missing Authorization to Unauthorized Form Submission
CVE-2024-10580
5.3 Medium
-
wpmudev hustle – email marketing, lead generation, optins, popups
Hustle – Email Marketing, Lead Generation, Optins, Popups <= 7.8.5 - Missing Authorization to Unpublished Form Exposure
CVE-2024-10579
4.3 Medium
-
wpmudev hustle, hustle – email marketing, lead generation, optins, popups +1 more
Hustle <= 7.8.3 - Sensitive Information Exposure via Exposed Hubspot API Keys
CVE-2024-0368
Public exploit
8.6 High