4.3Medium

CVE-2025-58007WordPress Social Pug Plugin <= 1.35.2 - Sensitive Data Exposure Vulnerability

NerdPress Hubbub Lite Published: (1 year ago)

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NerdPress Hubbub Lite social-pug allows Retrieve Embedded Sensitive Data.This issue affects Hubbub Lite: from n/a through <= 1.35.2.

Weakness (CWE): CWE-497

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
NerdPress Hubbub Lite ≤ 1.35.2

References and patches