Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-24998 EUVD-2026-5272GHSA-pqqg-82v7-fxr2

WordPress Hustle plugin <= 7.8.9.2 - Sensitive Data Exposure vulnerability

Published Feb 3, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hustle wordpress-popup allows Retrieve Embedded Sensitive Data.This issue affects Hustle: from n/a through <= 7.8.9.2.

Affected products

VendorProductAffectedFixed
WPMU DEV - Your All-in-One WordPress Platform Hustle ≤ 7.8.9.2 —

References