HU
Vendor
HubSpot
8
CVEs
0
On KEV
0
New 30D
Products
JI10.0
jinjava
HubSpot
4 CVEs0 on KEV0 new
HU8.8
HubSpot
HubSpot
3 CVEs0 on KEV0 new
HU8.1
Hubl-server
Hubspot
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-57736 | HU HubSpot HubSpot | 7.4 | Jul 1 | WordPress HubSpot plugin <= 11.3.51 - Sensitive Data Exposure vulnerability |
| CVE-2026-25526 | JI jinjava HubSpot | 9.8 | Feb 4 | JinJava Bypass through ForTag leads to Arbitrary Java Execution |
| CVE-2025-59340 | JI jinjava HubSpot | 10.0 | Sep 17 | jinjava Sandbox Bypass via JavaType-Based Deserialization |
| CVE-2024-5879 | HU Hubspot Hubspot | 5.4 | Aug 30 | The HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' attribute of the HubSpot Meeting… |
| CVE-2022-1239 | HU Hubspot Hubspot | 8.8 | May 2 | The HubSpot WordPress plugin before 8.8.15 does not validate the proxy URL given to the proxy REST endpoint, which could allow users with the edit_posts capability (by default… |
| CVE-2020-12668 | JI Jinjava Hubspot | 6.5 | Feb 19 | Jinjava before 2.5.4 allow access to arbitrary classes by calling Java methods on objects passed into a Jinjava context |
| CVE-2018-18893 | JI Jinjava Hubspot | 5.3 | Jan 3 | Jinjava before 2.4.6 does not block the getClass method, related to com/hubspot/jinjava/el/ext/JinjavaBeanELResolver.java |
| CVE-2017-16035 | HU Hubl-server Hubspot | 8.1 | Jun 4 | The hubl-server module is a wrapper for the HubL Development Server |