Plugin icon

HubSpot All-In-One Marketing – Forms, Popups, Live Chat

leadin

Vulnerabilities:

5

Last Updated:

September 16, 2026

Active Installs:

200000

Published
Title
Fixed in
CVSS
Published
2026-07-16
Title
HubSpot All-In-One Marketing < 11.3.64 - Authenticated (Contributor+) Sensitive Information Exposure via Block Editor Localized Script
Fixed in
Fixed in 11.3.64
CVSS
2.7 (low)
Published
2026-07-01
Title
HubSpot All-In-One Marketing – Forms, Popups, Live Chat < 11.3.56 - Authenticated (Contributor+) Information Exposure
Fixed in
Fixed in 11.3.56
CVSS
2.7 (low)
Published
2026-04-23
Title
HubSpot All-In-One Marketing - Forms, Popups, Live Chat < 11.3.33 - Missing Authorization to Authenticated (Contributor+) Installed Plugin Disclosure
Fixed in
Fixed in 11.3.33
CVSS
2.7 (low)
Published
2024-08-29
Title
HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics < 11.1.34 - Authenticated (Contributor+) Stored Cross-Site Scripting via HubSpot Meeting Widget
Fixed in
Fixed in 11.1.34
CVSS
6.4 (medium)
Published
2022-04-11
Title
HubSpot < 8.8.15 - Contributor+ Blind SSRF
Fixed in
Fixed in 8.8.15
CVSS
5.0 (medium)