Log in Start free

hubspotdev

Products

ProductCVEsExploitedLatest
HubSpot All-In-One Marketing – Forms, Popups, Live Chat3–Jul 17, 2026

Exploited and recent CVEs

  • CVE-2026-9656 Medium 4.3 HubSpot All-In-One Marketing <= 11.3.62 - Authenticated (Contributor+) Sensitive Information Exposure via Block Editor Localized Script 0.3%
  • CVE-2025-11762 Medium 4.3 HubSpot All-In-One Marketing - Forms, Popups, Live Chat <= 11.3.32 - Missing Authorization to Authenticated (Contributor+) Installed Plugin Disclosure 0.2%
  • CVE-2024-5879 Medium 6.4 HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics <= 11.1.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via HubSpot Meeting Widget 0.4%