CVE-2024-10580
27.11.2024, 07:15
The Hustle Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to unauthorized form submissions due to a missing capability check on the submit_form() function in all versions up to, and including, 7.8.5. This makes it possible for unauthenticated attackers to submit unpublished forms.Enginsight
| Vendor | Product | Version |
|---|---|---|
| wpmudev | hustle | 𝑥 ≤ 7.8.5 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References