Wpmudev

Hustle

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2026-0911

  • EPSS 0.09%
  • Veröffentlicht 24.01.2026 12:27:15
  • Zuletzt bearbeitet 26.01.2026 15:03:33

The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the action_import_module() function in all versions up to, and including, 7.8.9.2. Thi...

4.8

CVE-2024-8492

Exploit
  • EPSS 0.08%
  • Veröffentlicht 15.05.2025 20:15:58
  • Zuletzt bearbeitet 12.06.2025 15:46:49

The Hustle WordPress plugin through 7.8.5 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

5.3

CVE-2024-10580

  • EPSS 0.25%
  • Veröffentlicht 27.11.2024 07:15:07
  • Zuletzt bearbeitet 27.11.2024 07:15:07

The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to unauthorized form submissions due to a missing capability check on the submit_form() function in all versions up to, and including, 7.8.5. This makes ...

4.3

CVE-2024-10579

  • EPSS 0.15%
  • Veröffentlicht 26.11.2024 11:21:58
  • Zuletzt bearbeitet 26.11.2024 11:21:58

The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the preview_module() function in all versions up to, and including, 7.8.5. This makes...

8.6

CVE-2024-0368

  • EPSS 1.82%
  • Veröffentlicht 13.03.2024 16:15:10
  • Zuletzt bearbeitet 11.03.2025 16:51:23

The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.8.3 via hardcoded API Keys. This makes it possible for unauthenticated attacker...