Skip to content
OpenAdvisories

Vendor

NerdPress

3 known vulnerabilities.

Products

Hubbub Lite 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-27403

    WordPress Hubbub Lite plugin <= 1.36.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NerdPress Hubbub Lite allows Stored XSS. This issue affects Hubbub Lite: from n/a through 1.36.3.

    NerdPress Hubbub Lite
  • Medium 4.3
    CVE-2025-58007

    WordPress Social Pug Plugin <= 1.35.2 - Sensitive Data Exposure Vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NerdPress Hubbub Lite social-pug allows Retrieve Embedded Sensitive Data.This issue affects Hubbub Lite: from n/a through <= 1.35.2.

    NerdPress Hubbub Lite
  • Medium 5.3
    CVE-2023-49193

    WordPress Grow Social plugin <= 1.30.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in NerdPress Hubbub Lite social-pug allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hubbub Lite: from n/a through <= 1.30.0.

    NerdPress Hubbub Lite