Plugin icon

Hustle – Email Marketing, Lead Generation, Optins, Popups

wordpress-popup

Vulnerabilities:

10

Last Updated:

October 5, 2026

Active Installs:

80000

Published
Title
Fixed in
CVSS
Published
2026-10-07
Title
Hustle – Email Marketing, Lead Generation, Optins, Popups < 7.8.14.3 - Missing Authorization
Fixed in
Fixed in 7.8.14.3
CVSS
4.3 (medium)
Published
2026-09-07
Title
Hustle < 7.8.14.2 - Unauthenticated Arbitrary Shortcode Execution via Success Message Placeholders
Fixed in
Fixed in 7.8.14.2
CVSS
4.8 (medium)
Published
2026-05-12
Title
Hustle – Email Marketing, Lead Generation, Optins, Popups < 7.8.10.2 - Missing Authorization
Fixed in
Fixed in 7.8.10.2
CVSS
5.3 (medium)
Published
2026-04-07
Title
Hustle – Email Marketing, Lead Generation, Optins, Popups < 7.8.11 - Missing Authorization to Unauthenticated Conversion Tracking Data Manipulation
Fixed in
Fixed in 7.8.11
CVSS
5.3 (medium)
Published
2026-01-25
Title
Hustle < 7.8.9.3 - Unauthenticated Information Exposure
Fixed in
Fixed in 7.8.9.3
CVSS
5.3 (medium)
Published
2026-01-23
Title
Hustle < 7.8.9.3 - Subscriber+ Arbitrary File Upload via Module Import
Fixed in
Fixed in 7.8.9.3
CVSS
7.5 (high)
Published
2024-11-26
Title
Hustle – Email Marketing, Lead Generation, Optins, Popups < 7.8.6 - Missing Authorization to Unauthorized Form Submission
Fixed in
Fixed in 7.8.6
CVSS
5.3 (medium)
Published
2024-11-25
Title
Hustle – Email Marketing, Lead Generation, Optins, Popups < 7.8.6 - Missing Authorization to Unpublished Form Exposure
Fixed in
Fixed in 7.8.6
CVSS
4.3 (medium)
Published
2024-07-29
Title
Hustle < 7.8.5 - Admin+ Stored XSS
Fixed in
Fixed in 7.8.5
CVSS
3.5 (low)
Published
2019-05-24
Title
Hustle < 6.0.8.1 - Unauthenticated CSV Injection
Fixed in
Fixed in 6.0.8.1
CVSS
8.8 (high)