← Back

Devpups

devpups

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Social Pug
social_pug
3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-10145
1Devpups
1Social Pug
Jun 17, 2026
May 15, 2025
N/A· v4
4.8 MEDIUM· v3
N/A· v2
The Hubbub Lite WordPress plugin before 1.34.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilte...Show more
The Hubbub Lite WordPress plugin before 1.34.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).Show less
CVE-2024-1526
1Devpups
1Social Pug
Jun 17, 2026
Apr 1, 2024
N/A· v4
5.3 MEDIUM· v3
N/A· v2
The Hubbub Lite WordPress plugin before 1.33.1 does not ensure that user have access to password protected post before displaying its content in a meta tag.
CVE-2016-10736
1Devpups
1Social Pug
Nov 21, 2024
Jan 9, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The "Social Pug - Easy Social Share Buttons" plugin before 1.2.6 for WordPress allows XSS via the wp-admin/admin.php?page=dpsp-toolkit dpsp_message_class parameter.