VULNERABILITY INTELLIGENCE

CVE-2024-0368

CVSS score8.6 HIGH
EPSS probability0.78%
CISA KEVNot currently listed
Published2024-03-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Description

The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.8.3 via hardcoded API Keys. This makes it possible for unauthenticated attackers to extract sensitive data including PII.

Weakness classification

  • security@wordfence.com: CWE-522
  • nvd@nist.gov: NVD-CWE-Other

Primary references