CVE-2026-125767: WordPress Hubbub Lite plugin <= 1.36.3.1 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in NerdPress Hubbub Lite social-pug allows Retrieve Embedded Sensitive Data.This issue affects Hubbub Lite: from n/a through 1.36.3.1.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Hubbub Liteto a version that resolves this vulnerability.Fixed in 1.36.3.2
Event History
Frequently Asked Questions
Who can exploit this issue?
The vector is network-accessible, requires no privileges, and requires no user interaction. An unauthenticated remote attacker could retrieve embedded sensitive data.
Which installations are affected?
Hubbub Lite versions through 1.36.3.1 are affected. The provided data does not identify a fixed version or any configuration prerequisite.
What is the impact of successful exploitation?
The stated impact is exposure of sensitive information embedded in sent data. The supplied severity vector indicates low confidentiality impact and no integrity or availability impact.