Skip to contentWpmudev Hustle – Email Marketing, Lead Generation, Optins, Popups vulnerabilities
- wpmudev hustle – email marketing, lead generation, optins, popupsHustle <= 7.8.14.3 - Missing Authorization to Authenticated (Custom+) ESP Credential Overwrite and Irreversible OAuth Token Deletion via 'hustle_provider_migrate_hubspot' (and sibling migrate_*) AJAX…CVE-2026-1093864.3 Medium
- wpmudev hustle – email marketing, lead generation, optins, popupsHustle <= 7.8.14.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'cta_label' ParameterCVE-2026-1181694.9 Medium
- wpmudev hustle – email marketing, lead generation, optins, popupsHustle <= 7.8.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Module Content TitleCVE-2026-1077106.4 Medium
- wpmudev hustle – email marketing, lead generation, optins, popupsHustle – Email Marketing, Lead Generation, Optins, Popups <= 7.8.10.2 - Missing Authorization to Unauthenticated Conversion Tracking Data ManipulationCVE-2026-22635.3 Medium
- wpmudev hustle – email marketing, lead generation, optins, popupsHustle <= 7.8.9.2 - Authenticated (Subscriber+) Arbitrary File Upoload via Module ImportCVE-2026-0911Public exploit7.5 High
- wpmudev hustle, hustle – email marketing, lead generation, optins, popups +1 moreHustle – Email Marketing, Lead Generation, Optins, Popups <= 7.8.5 - Missing Authorization to Unauthorized Form SubmissionCVE-2024-105805.3 Medium
- wpmudev hustle – email marketing, lead generation, optins, popupsHustle – Email Marketing, Lead Generation, Optins, Popups <= 7.8.5 - Missing Authorization to Unpublished Form ExposureCVE-2024-105794.3 Medium
- wpmudev hustle, hustle – email marketing, lead generation, optins, popups +1 moreHustle <= 7.8.3 - Sensitive Information Exposure via Exposed Hubspot API KeysCVE-2024-0368Public exploit8.6 High