CVE-2024-1526

The Hubbub Lite WordPress plugin (versions prior to 1.33.1 ) contains a vulnerability where it fails to verify user access permissions for password-protected posts before displaying their content within a meta tag . This flaw could allow an attacker to obtain sensitive information by accessing co...

CVE-2016-10736

CVE-2016-10736 affects the WordPress plugin Social Pug - Easy Social Share Buttons, before version 1.2.6. The vulnerability is an XSS in the wp-admin/admin.php?page=dpsp-toolkit with the dpsp_message_class parameter. Public sources (NVD entry and multiple vulnerability databases) describe it as a...

CVE-2024-10145

The Hubbub Lite WordPress plugin versions prior to 1.34.4 is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the failure to properly sanitize and escape certain plugin settings. This vulnerability allows high-privilege users, such as administrators, to perform XSS attack...