Vulnerabilities > Hubspot > High

DATE CVE VULNERABILITY TITLE RISK
2022-05-02 CVE-2022-1239 Unspecified vulnerability in Hubspot
The HubSpot WordPress plugin before 8.8.15 does not validate the proxy URL given to the proxy REST endpoint, which could allow users with the edit_posts capability (by default contributor and above) to perform SSRF attacks
network
low complexity
hubspot
8.8
2018-06-04 CVE-2017-16035 Cleartext Transmission of Sensitive Information vulnerability in Hubspot Hubl-Server
The hubl-server module is a wrapper for the HubL Development Server.
network
high complexity
hubspot CWE-319
8.1