Skip to content
OpenAdvisories

Vendor

wpmudev

65 known vulnerabilities.

Products

Forminator Forms – Contact Form, Payment Form & Custom Form Builder 37 Hustle – Email Marketing, Lead Generation, Optins, Popups 8 Branda – White Label & Branding, Free Login Page Customizer 5 Broken Link Checker 5 SmartCrawl SEO checker, analyzer & optimizer 3 WPMU DEV Dashboard 2 Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN 2 Smush – Image Optimization, Compression, Lazy Load, WebP & CDN 1 Appointments 1 Defender Security – Malware Scanner, Login Security & Firewall 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-0911 Public exploit

    Hustle <= 7.8.9.2 - Authenticated (Subscriber+) Arbitrary File Upoload via Module Import

    The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the action_import_module() function in all versions up to, and including, 7.8.9.2. This makes i…

    wpmudev Hustle – Email Marketing, Lead Generation, Optins, Popups Web / CMS
  • High 8.6
    CVE-2024-0368 Public exploit

    Hustle <= 7.8.3 - Sensitive Information Exposure via Exposed Hubspot API Keys

    The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.8.3 via hardcoded API Keys. This makes it possible for unauthenticated attackers to extr…

    wpmudev Hustle – Email Marketing, Lead Generation, Optins, Popups Web / CMS