GCVE - cpe:2.3:a:nerdpress:hubbub_lite:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:nerdpress:hubbub_lite:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Nerdpress (`bc6d31ab-9b04-5add-aeaf-687b0ebde203`)
Product	Hubbub Lite (`7ba7f4bb-8345-5452-83fa-142dd8b317fe`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-27403`	vulnerable	2026-07-29 00:34:59.520173	WordPress Hubbub Lite plugin <= 1.36.3 - Cross Site Scripting (XSS) vulnerability MEDIUM (6.5) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NerdPress Hubbub Lite allows Stored XSS. This issue affects Hubbub Lite: from n/a through 1.36.3. Published: 2026-07-23T11:17:56.966Z Updated: 2026-07-23T19:32:40.652Z Open on db.gcve.eu Reference links https://patchstack.com/database/wordpress/plugin/social-pug/vulnerability/wordpress-hubbub-lite-plugin-1-36-3-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-58007`	vulnerable	2026-06-08 07:35:16.839970	WordPress Social Pug Plugin <= 1.35.2 - Sensitive Data Exposure Vulnerability MEDIUM (4.3) Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NerdPress Hubbub Lite social-pug allows Retrieve Embedded Sensitive Data.This issue affects Hubbub Lite: from n/a through <= 1.35.2. Published: 2025-09-22T18:24:10.886Z Updated: 2026-04-28T16:13:40.505Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/social-pug/vulnerability/wordpress-social-pug-plugin-1-35-1-sensitive-data-exposure-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-49193`	vulnerable	2026-06-08 06:14:28.721137	WordPress Grow Social plugin <= 1.30.0 - Broken Access Control vulnerability MEDIUM (5.3) Missing Authorization vulnerability in NerdPress Hubbub Lite social-pug allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hubbub Lite: from n/a through <= 1.30.0. Published: 2024-12-09T11:30:18.438Z Updated: 2026-04-29T09:51:52.391Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/social-pug/vulnerability/wordpress-grow-social-plugin-1-20-3-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.