Hustle – Email Marketing, Lead Generation, Optins, Popups

Уязвимости

• CVE-2019-11872

  The Hustle (aka wordpress-popup) plugin 6.0.7 for WordPress is vulnerable to CSV Injection as it allows for injecting malicious code into a

  Высокий 8.8

• CVE-2024-0368

  Hustle <= 7.8.3 - Sensitive Information Exposure via Exposed Hubspot API Keys

  Высокий 8.6

• CVE-2026-0911

  Hustle <= 7.8.9.2 - Authenticated (Subscriber+) Arbitrary File Upoload via Module Import

  Высокий 7.5

• CVE-2026-25431

  WordPress Hustle plugin <= 7.8.10.1 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2026-2263

  Hustle – Email Marketing, Lead Generation, Optins, Popups <= 7.8.10.2 - Missing Authorization to Unauthenticated Conversion Tracking Data Manipulation

  Средний 5.3

• CVE-2026-24998

  WordPress Hustle plugin <= 7.8.9.2 - Sensitive Data Exposure vulnerability

  Средний 5.3

• CVE-2024-10580

  Hustle – Email Marketing, Lead Generation, Optins, Popups <= 7.8.5 - Missing Authorization to Unauthorized Form Submission

  Средний 5.3

• CVE-2018-18576

  The Hustle (aka wordpress-popup) plugin through 6.0.5 for WordPress allows Directory Traversal to obtain a directory listing via the views/a

  Средний 5.3

• CVE-2024-10579

  Hustle – Email Marketing, Lead Generation, Optins, Popups <= 7.8.5 - Missing Authorization to Unpublished Form Exposure

  Средний 4.3