Hustle – Email Marketing, Lead Generation, Optins, Popups

Уязвимости

• CVE-2019-11872без авторизации · нужен клик

  The Hustle (aka wordpress-popup) plugin 6.0.7 for WordPress is vulnerable to CSV Injection as it allows for injecting malicious code into a

  Высокий 8.8

• CVE-2024-0368без авторизации≤ 7.8.3

  Hustle <= 7.8.3 - Sensitive Information Exposure via Exposed Hubspot API Keys

  Высокий 8.6

• CVE-2026-0911подписчик+≤ 7.8.9.2

  Hustle <= 7.8.9.2 - Authenticated (Subscriber+) Arbitrary File Upoload via Module Import

  Высокий 7.5

• CVE-2026-25431без авторизации≤ 7.8.10.1

  WordPress Hustle plugin <= 7.8.10.1 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2026-2263без авторизации≤ 7.8.10.2

  Hustle – Email Marketing, Lead Generation, Optins, Popups <= 7.8.10.2 - Missing Authorization to Unauthenticated Conversion Tracking Data Manipulation

  Средний 5.3

• CVE-2026-24998без авторизации≤ 7.8.9.2

  WordPress Hustle plugin <= 7.8.9.2 - Sensitive Data Exposure vulnerability

  Средний 5.3

• CVE-2024-10580без авторизации≤ 7.8.5

  Hustle – Email Marketing, Lead Generation, Optins, Popups <= 7.8.5 - Missing Authorization to Unauthorized Form Submission

  Средний 5.3

• CVE-2018-18576без авторизации

  The Hustle (aka wordpress-popup) plugin through 6.0.5 for WordPress allows Directory Traversal to obtain a directory listing via the views/a

  Средний 5.3

• CVE-2024-10579подписчик+≤ 7.8.5

  Hustle – Email Marketing, Lead Generation, Optins, Popups <= 7.8.5 - Missing Authorization to Unpublished Form Exposure

  Средний 4.3