High · 7.1 CVE-2026-73396 EUVD-2026-60802GHSA-62wx-4c4c-2f4h

WordPress MWB HubSpot for WooCommerce plugin <= 1.6.7 - Broken Authentication vulnerability

Published Aug 18, 2026 · Updated Aug 18, 2026 · Assigned by Patchstack

Vendor: MakeWebBetter Product: MWB HubSpot for WooCommerce Category: Web / CMS

Description

Subscriber Broken Authentication in MWB HubSpot for WooCommerce <= 1.6.7 versions.

Affected products

Vendor	Product	Affected	Fixed
MakeWebBetter	MWB HubSpot for WooCommerce	≤ 1.6.7	—

References

https://patchstack.com/database/wordpress/plugin/makewebbetter-hubspot-for-woocommerce/vulnerability/wordpress-mwb-hubspot-for-woocommerce-plugin-1-6-7-broken-authentication-vulnerability?_s_id=cve vdb-entry