CVE-2024-1526

The Hubbub Lite WordPress plugin (versions prior to 1.33.1 ) contains a vulnerability where it fails to verify user permissions for password-protected posts before displaying content in a meta tag . This flaw could allow an attacker to obtain sensitive information by accessing restricted content....

CVE-2016-10736

CVE-2016-10736 affects the WordPress plugin Social Pug - Easy Social Share Buttons, before version 1.2.6. The vulnerability is an XSS in the wp-admin/admin.php?page=dpsp-toolkit with the dpsp_message_class parameter. Public sources (NVD entry and multiple vulnerability databases) describe it as a...

CVE-2024-10145

The Hubbub Lite WordPress plugin versions prior to 1.34.4 is vulnerable to a Stored Cross-Site Scripting (XSS) attack. The root cause is the failure to properly sanitize and escape certain plugin settings. This flaw allows high-privilege users, such as administrators, to perform XSS attacks even ...