CVE-2025-60178

CVE-2025-60178 affects the WordPress plugin WP Gravity Forms HubSpot gf-hubspot

PT-2025-52149

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms HubSpot gf-hubspot allows Object Injection.This issue affects WP Gravity Forms HubSpot: from n/a through = 1.2.6...

WordPress plugin WP Gravity Forms HubSpot 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

CVE-2025-60178: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms HubSpot gf-hubspot allows Object Injection.This issue affects WP Gravity Forms HubSpot: from n/a through = 1.2.6...

Malicious code in raven-hubspot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 273a299e42e423bb2ac50f586ff57f8e869843110509c6d0e50b62dd9e91c228 The package raven-hubspot was found to contain malicious code. Source: ghsa-malware 6f62a48e9794e44ec492f8e1951f61f7953e08d5217b220ebcdea64d076a9d57...

EUVD-2025-203526

Malicious code in raven-hubspot npm...

MAL-2025-192597 Malicious code in raven-hubspot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 273a299e42e423bb2ac50f586ff57f8e869843110509c6d0e50b62dd9e91c228 The package raven-hubspot was found to contain malicious code. Source: ghsa-malware 6f62a48e9794e44ec492f8e1951f61f7953e08d5217b220ebcdea64d076a9d57...

Gainsight Expands Impacted Customer List Following Salesforce Security Alert

Gainsight has disclosed that the recent suspicious activity targeting its applications has affected more customers than previously thought. The company said Salesforce initially provided a list of 3 impacted customers and that it has "expanded to a larger list" as of November 21, 2025. It did not...

CVE-2023-37749

Incorrect access control in the REST API endpoint of HubSpot v1.29441 allows unauthenticated attackers to view users' data without proper authorization...

CVE-2023-37749

Incorrect access control in the REST API endpoint of HubSpot v1.29441 allows unauthenticated attackers to view users' data without proper authorization...

CVE-2023-37749

Incorrect access control in the REST API endpoint of HubSpot v1.29441 allows unauthenticated attackers to view users' data without proper authorization...

CVE-2023-37749

Incorrect access control in the REST API endpoint of HubSpot v1.29441 allows unauthenticated attackers to view users' data without proper authorization...

PT-2025-43974

Name of the Vulnerable Software and Affected Versions HubSpot version 1.29441 Description An issue exists in the REST API endpoint of HubSpot that allows unauthenticated attackers to view users' data without proper authorization due to incorrect access control. The API endpoint ''/api/v1/users'' ...

CVE-2023-37749: Improper Access Control

Incorrect access control in the REST API endpoint of HubSpot v1.29441 allows unauthenticated attackers to view users' data without proper authorization...

CVE-2023-37749

HubSpot version v1.29441 is affected by a vulnerability involving incorrect access control in its REST API. Specifically, the endpoint /api/v1/users fails to properly authorize requests, allowing unauthenticated attackers to view sensitive users' data . The vulnerability is triggered through the ...

HubSpot 安全漏洞

HubSpot is a customer relationship management platform in the United States. A security vulnerability exists in HubSpot version v1.29441, which stems from improper access control of REST API endpoints and could lead to unauthorized viewing of user data...

CVE-2025-11257

The LLM Hubspot Blog Import plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'processsaveblogs' AJAX endpoint in all versions up to, and including, 1.0.1. This makes it possible for authenticated attackers, with Subscriber-level acce...

WordPress plugin LLM Hubspot Blog Import 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

CVE-2025-11257

The LLM Hubspot Blog Import plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'processsaveblogs' AJAX endpoint in all versions up to, and including, 1.0.1. This makes it possible for authenticated attackers, with Subscriber-level acce...

CVE-2025-11257 LLM Hubspot Blog Import <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Hubspot Import

The LLM Hubspot Blog Import plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'processsaveblogs' AJAX endpoint in all versions up to, and including, 1.0.1. This makes it possible for authenticated attackers, with Subscriber-level acce...