Really Simple Security logo

Log out
Get PRO

Latest

Access violation vulnerability in Easy Embed for HubSpot Forms, CTAs, Links, Files & add HubSpot to WP Search Results 1.1.0

  • Severity: high-risk
  • Status: Open
  • Publication: February 16, 2022

The Easy Embed for HubSpot Forms, CTAs, Links, Files & add HubSpot to WP Search Results plugin for WordPress has a security vulnerability in versions up to and including 1.1.0. This vulnerability allows attackers who have logged in to the website to change settings that they should not have access to. This is due to the lack of security measures like capability checks and nonce checks on the Hub2Word_save_settings function.

Detected in:

Easy Embed for HubSpot Forms, CTAs, Links, Files & add HubSpot to WP Search Results open vulnerable versions: >= * <= 1.1.0

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.