Hustle Security Vulnerabilities and Issues — Hustle CVE List

Lucene search

WpmudevHustle

3 matches found

CVE•added 2024/03/13 4:15 p.m.•57 views

CVE-2024-0368

The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.8.3 via hardcoded API Keys. This makes it possible for unauthenticated attackers to extract sensitive data including PII.

8.6CVSS8.8AI score0.0182EPSS

CVE•added 2024/11/27 7:15 a.m.•44 views

CVE-2024-10580

The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to unauthorized form submissions due to a missing capability check on the submit_form() function in all versions up to, and including, 7.8.5. This makes it possible for unauthenticated attackers to subm...

5.3CVSS5.2AI score0.00077EPSS

CVE•added 2025/05/15 8:15 p.m.•16 views

CVE-2024-8492

The Hustle WordPress plugin through 7.8.5 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

4.8CVSS5.7AI score0.00034EPSS