Plugin icon

Hubbub Lite – Fast, free social sharing and follow buttons

social-pug

Vulnerabilities:

9

Last Updated:

December 9, 2025

Active Installs:

40000

Published
Title
Fixed in
CVSS
Published
2025-11-05
Title
Hubbub Lite < 1.36.1 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.36.1
CVSS
6.1 (medium)
Published
2025-09-22
Title
Hubbub Lite < 1.36.0- Subscriber+ Sensitive Information Exposure
Fixed in
Fixed in 1.36.0
CVSS
4.3 (medium)
Published
2024-09-27
Title
Hubbub Lite < 1.34.4 - Admin+ Stored XSS
Fixed in
Fixed in 1.34.4
CVSS
3.5 (low)
Published
2024-03-27
Title
Hubbub Lite – Fast, Reliable Social Network Sharing Buttons < 1.33.2 - PHP Object Injection
Fixed in
Fixed in 1.33.2
CVSS
7.5 (high)
Published
2024-03-11
Title
Hubbub Lite < 1.33.1 - Unauthenticated Password Protected Posts Access
Fixed in
Fixed in 1.33.1
CVSS
5.3 (medium)
Published
2024-01-11
Title
Hubbub Lite < 1.32.0 - Admin+ Stored XSS
Fixed in
Fixed in 1.32.0
CVSS
3.5 (low)
Published
2023-12-01
Title
Social Pug < 1.30.1 - Missing Authorization via multiple admin_init actions
Fixed in
Fixed in 1.30.1
CVSS
5.3 (medium)
Published
2021-07-08
Title
Grow Social < 1.19.0 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.19.0
CVSS
4.7 (medium)
Published
2016-12-09
Title
Social Share Buttons - Social Pug <= 1.2.5 - Authenticated Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.2.6
CVSS
6.1 (medium)