Vulnerabilidades de nerdpressteam (CVE)

Registros CVE publicados para nerdpressteam, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

3 resultados
6.1Media
CVE-2025-12471

Hubbub Lite <= 1.36.0 - Reflected Cross-Site Scripting

nerdpressteam Hubbub Lite – Fast, free social sharing and follow buttons

The Hubbub Lite – Fast, free social sharing and follow buttons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dpsp_list_attention_search' parameter in all versions up to, and including, 1.36.0 due to insufficient input sanitizat…

7.5Alta
CVE-2024-2501

Hubbub Lite – Fast, Reliable Social Network Sharing Buttons <= 1.33.1 - PHP Object Injection

nerdpressteam Hubbub Lite – Fast, free social sharing and follow buttons; morehubbub hubbub_lite; nerdpress hubbub_lites

The Hubbub Lite – Fast, Reliable Social Sharing Buttons plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.33.1 via deserialization of untrusted input via the 'dpsp_maybe_unserialize' function. This makes it pos…