CVE-2024-1526

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

The Hubbub Lite WordPress plugin before 1.33.1 does not ensure that user have access to password protected post before displaying its content in a meta tag.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected software

Vendor	Product	Versions
Unknown	Hubbub Lite	< 1.33.1

References

https://wpscan.com/vulnerability/1664697e-0ea3-4d09-b2fd-153a104ec255/Exploit, Third Party Advisory
https://wpscan.com/vulnerability/1664697e-0ea3-4d09-b2fd-153a104ec255/Exploit, Third Party Advisory

Timeline

Published: Apr 1, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-15278.8Unrestricted file upload vulnerability in CMS Made Simple, affecting version 2.2.14. This vulnerability allows an authenticated user to bypa CVE-2024-15286.1CMS Made Simple version 2.2.14, does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability CVE-2024-15296.1Vulnerability in CMS Made Simple 2.2.14, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS)CVE-2024-15308.8A vulnerability, which was classified as critical, has been found in ECshop 4.1.8. Affected by this issue is some unknown functionality of t CVE-2024-15318.2A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below. A malicious actor cou CVE-2024-15326.8A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below. A malicious actor cou CVE-2024-15335.4The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HTML Element in CVE-2024-15345.4The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions CVE-2024-15355.4The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPre CVE-2024-15367.4The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to St CVE-2024-15376.4The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to St CVE-2024-15388.8The File Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 7.2.4. This is due t