CVE-2024-5879

CVE-2024-5879 —HubSpot plugin for WordPress is vulnerable to Stored XSS via the url attribute in the HubSpot Meeting Widget. Reported as affecting all versions up to 11.1.22 due to insufficient input sanitization and output escaping; exploitation requires Contributor-level access or higher and ca...

WordPress HubSpot plugin <= 11.1.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via HubSpot Meeting Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via HubSpot Meeting Widget vulnerability discovered by wesley wcraft in WordPress Plugin HubSpot versions = 11.1.22...

WordPress plugin HubSpot 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

WordPress HubSpot Plugin <= 11.1.22 is vulnerable to Cross Site Scripting (XSS)

Software HubSpot Type Plugin Vulnerable versions = 11.1.22 Fixed in 11.1.34 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5879 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID db39dc037825 Credits wesley wcraft Required...

PT-2024-37216 · Hubspot · Hubspot

Name of the Vulnerable Software and Affected Versions: HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics plugin for WordPress versions up to, and including, 11.1.22 Description: The issue is related to Stored Cross-Site Scripting via the url attribute of the HubSpot Meeting Widget due ...

CVE-2024-7389

The Forminator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.29.1 via class-forminator-addon-hubspot-wp-api.php. This makes it possible for unauthenticated attackers to extract the HubSpot integration developer API key and make...

CVE-2024-7389

The Forminator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.29.1 via class-forminator-addon-hubspot-wp-api.php. This makes it possible for unauthenticated attackers to extract the HubSpot integration developer API key and make...

CVE-2024-7389 Forminator <= 1.29.1 - HubSpot Developer API Key Sensitive Information Exposure

The Forminator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.29.1 via class-forminator-addon-hubspot-wp-api.php. This makes it possible for unauthenticated attackers to extract the HubSpot integration developer API key and make...

CVE-2024-7389 Forminator <= 1.29.1 - HubSpot Developer API Key Sensitive Information Exposure

The Forminator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.29.1 via class-forminator-addon-hubspot-wp-api.php. This makes it possible for unauthenticated attackers to extract the HubSpot integration developer API key and make...

CVE-2024-7389

The CVE-2024-7389 entry affects the WordPress Forminator plugin (versions

WordPress Forminator plugin <= 1.29.1 - HubSpot Developer API Key Sensitive Information Exposure vulnerability

HubSpot Developer API Key Sensitive Information Exposure vulnerability discovered by Sean Murphy in WordPress Plugin Forminator versions = 1.29.1...

PT-2024-38317 · WordPress · Forminator

Name of the Vulnerable Software and Affected Versions: Forminator plugin for WordPress versions up to, and including, 1.29.1 Description: The issue allows unauthenticated attackers to extract the HubSpot integration developer API key, making unauthorized changes to the plugin's HubSpot integratio...

Integration for Contact Form 7 HubSpot <=1.3.1 - Cross-Site Request Forgery

Description The Integration for Contact Form 7 HubSpot plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.1. This is due to missing or incorrect nonce validation on the settingspage function. This makes it possible for unauthenticated attackers ...

CVE-2024-34756

Cross-Site Request Forgery CSRF vulnerability in CRM Perks Integration for Contact Form 7 HubSpot.This issue affects Integration for Contact Form 7 HubSpot: from n/a through 1.3.1...

CVE-2024-34756

CVE-2024-34756 is a Cross-Site Request Forgery (CSRF) vulnerability in the CRM Perks Integration for Contact Form 7 HubSpot, affecting Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms up to version 1.3.1. Root cause: CSRF flaw in the HubSpot integration; impact and prec...

CVE-2024-34756 WordPress Integration for HubSpot and Contact Form 7 plugin <= 1.3.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in CRM Perks Integration for Contact Form 7 HubSpot.This issue affects Integration for Contact Form 7 HubSpot: from n/a through 1.3.1...

CVE-2024-34756 WordPress Integration for HubSpot and Contact Form 7 plugin <= 1.3.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in CRM Perks Integration for Contact Form 7 HubSpot.This issue affects Integration for Contact Form 7 HubSpot: from n/a through 1.3.1...

WordPress plugin Integration for Contact Form 7 HubSpot 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress plugin Integration for Contact Form 7 A...

WordPress Integration for HubSpot and Contact Form 7 plugin <=1.3.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Integration for Contact Form 7 HubSpot versions = 1.3.1...

WordPress Integration for Contact Form 7 HubSpot Plugin <=1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Integration for Contact Form 7 HubSpot Type Plugin Vulnerable versions =1.3.1 Fixed in 1.3.2 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-34756 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID bb0e35516917 Credi...