minnur
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| External Media | 1 | – | Jan 7, 2026 |
| Integration with Hubspot Forms | 1 | – | Mar 21, 2026 |
Exploited and recent CVEs
- CVE-2026-1908 Integration with Hubspot Forms <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes 0.2%
- CVE-2025-49335 WordPress External Media plugin <= 1.0.36 - Server Side Request Forgery (SSRF) vulnerability 0.1%