hubspotdev HubSpot All-In-One Marketing – Forms, Popups, Live Chat

• CVE-2026-9656 Medium 4.3 HubSpot All-In-One Marketing <= 11.3.62 - Authenticated (Contributor+) Sensitive Information Exposure via Block Editor Localized Script 0.3%
• CVE-2025-11762 Medium 4.3 HubSpot All-In-One Marketing - Forms, Popups, Live Chat <= 11.3.32 - Missing Authorization to Authenticated (Contributor+) Installed Plugin Disclosure 0.2%
• CVE-2024-5879 Medium 6.4 HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics <= 11.1.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via HubSpot Meeting Widget 0.4%