Skip to content
OpenAdvisories

Vendor

hubspotdev

3 known vulnerabilities.

Products

HubSpot All-In-One Marketing – Forms, Popups, Live Chat 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-9656

    HubSpot All-In-One Marketing <= 11.3.62 - Authenticated (Contributor+) Sensitive Information Exposure via Block Editor Localized Script

    The HubSpot All-In-One Marketing – Forms, Popups, Live Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 11.3.62 via the wp_localize_script() / window.leadinConfig JavaScript object. This makes it …

    hubspotdev HubSpot All-In-One Marketing – Forms, Popups, Live Chat Web / CMS
  • Medium 4.3
    CVE-2025-11762

    HubSpot All-In-One Marketing - Forms, Popups, Live Chat <= 11.3.32 - Missing Authorization to Authenticated (Contributor+) Installed Plugin Disclosure

    The HubSpot All-In-One Marketing - Forms, Popups, Live Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 11.3.32 via the leadin/public/admin/class-adminconstants.php file. This makes it possible fo…

    hubspotdev HubSpot All-In-One Marketing – Forms, Popups, Live Chat Web / CMS
  • Medium 6.4
    CVE-2024-5879

    HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics <= 11.1.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via HubSpot Meeting Widget

    The HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' attribute of the HubSpot Meeting Widget in all versions up to, and including, 11.1.22 due to insufficient input sa…

    hubspotdev HubSpot All-In-One Marketing – Forms, Popups, Live Chat Web / CMS