Login Request a demo
HU
Product
HubSpot
by HubSpot · last CVE Jul 1, 2026
3
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 2Medium 1Low 0
Severity
All severities3Critical0High2Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add HubSpot to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-1239
8.8
1%
May 2
The HubSpot WordPress plugin before 8.8.15 does not validate the proxy URL given to the proxy REST endpoint, which could allow users with the edit_posts capability (by default…
Affected: before 8.8.15
CVE-2026-57736
7.4
0%
Jul 1
WordPress HubSpot plugin <= 11.3.51 - Sensitive Data Exposure vulnerability
Affected: through 11.3.51
CVE-2024-5879
5.4
0%
Aug 30
The HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' attribute of the HubSpot Meeting…
Affected: before 11.1.34
Showing 3