CVE-2026-73396

Subscriber Broken Authentication in MWB HubSpot for WooCommerce = 1.6.7 versions...

CVE-2026-73396

The MWB HubSpot for WooCommerce plugin (≤1.6.7) has a broken authentication flaw exploitable by any logged-in subscriber over the network with low complexity, causing high availability impact and low integrity impact (CVSS 7.1); upgrading beyond 1.6.7 is recommended. Patchstack advisory: https://...

CVE-2026-73396

Subscriber Broken Authentication in MWB HubSpot for WooCommerce = 1.6.7 versions...

CVE-2026-73396 WordPress MWB HubSpot for WooCommerce plugin <= 1.6.7 - Broken Authentication vulnerability

Subscriber Broken Authentication in MWB HubSpot for WooCommerce = 1.6.7 versions...

CVE-2026-73396 WordPress MWB HubSpot for WooCommerce plugin <= 1.6.7 - Broken Authentication vulnerability

Subscriber Broken Authentication in MWB HubSpot for WooCommerce = 1.6.7 versions...

EUVD-2026-60802

Subscriber Broken Authentication in MWB HubSpot for WooCommerce = 1.6.7 versions...

WordPress MWB HubSpot for WooCommerce plugin <= 1.6.7 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Jakub Herman in WordPress Plugin MWB HubSpot for WooCommerce versions = 1.6.7...

PT-2026-77116

Name of the Vulnerable Software and Affected Versions MWB HubSpot for WooCommerce versions prior to 1.6.8 Description The software contains a broken authentication mechanism that allows users with Subscriber privileges to bypass authentication requirements. Recommendations Update MWB HubSpot for...

CVE-2026-73396: Authentication Bypass Using an Alternate Path or Channel

Subscriber Broken Authentication in MWB HubSpot for WooCommerce = 1.6.7 versions...

CVE-2024-10591

The CVE CVE-2024-10591 concerns the MWB HubSpot for WooCommerce plugin for WordPress (versions up to 1.5.9). The vulnerability is a missing capability check in hubwoo_save_updates(), allowing authenticated attackers with Contributor-level access or higher to modify arbitrary options, potentially ...

CVE-2024-10591 MWB HubSpot for WooCommerce – CRM, Abandoned Cart, Email Marketing, Marketing Automation & Analytics <= 1.5.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Options Update

The MWB HubSpot for WooCommerce – CRM, Abandoned Cart, Email Marketing, Marketing Automation & Analytics plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the hubwoosaveupdates function in all version...

CVE-2024-10591 MWB HubSpot for WooCommerce – CRM, Abandoned Cart, Email Marketing, Marketing Automation & Analytics <= 1.5.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Options Update

The MWB HubSpot for WooCommerce – CRM, Abandoned Cart, Email Marketing, Marketing Automation & Analytics plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the hubwoosaveupdates function in all version...

PT-2025-1597 · WordPress · Mwb Hubspot For Woocommerce

Name of the Vulnerable Software and Affected Versions: MWB HubSpot for WooCommerce – CRM, Abandoned Cart, Email Marketing, Marketing Automation & Analytics plugin for WordPress versions up to, and including, 1.5.9 Description: The issue concerns unauthorized modification of data that can lead to...

CVE-2024-10591: Missing Authorization

The MWB HubSpot for WooCommerce – CRM, Abandoned Cart, Email Marketing, Marketing Automation & Analytics plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the hubwoosaveupdates function in all version...