Vulnerability alerts / October 7, 2026

Vulnerability in Hustle – Email Marketing, Lead Generation, Optins, Popups — CVE-2026-103075

MediumSeverity
CVSS 4.3

0.3%Estimated exploit probability
EPSS

90,000+ sitesInstalls

7.8.14.3Fixed in

What to do now

Update Hustle – Email Marketing, Lead Generation, Optins, Popups to 7.8.14.3 or later.

Affected versions

Everything up to and including 7.8.14.2

Affected: Hustle – Email Marketing, Lead Generation, Optins, Popups (plugin, wordpress-popup)

Check: The plugin on wordpress.org / Our record for Hustle – Email Marketing, Lead Generation, Optins, Popups

What the vulnerability is

Missing Authorization vulnerability in WPMU DEV Hustle wordpress-popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hustle: from n/a through 7.8.14.2.

This description is reproduced verbatim from the public vulnerability record.

Sources

https://patchstack.com/database/wordpress/plugin/wordpress-popup/vulnerability/wordpress-hustle-plugin-7-8-14-2-broken-access-control-vulnerability?_s_id=cve

This page is compiled automatically from public databases. Accuracy is not guaranteed; confirm against the vendor advisory before acting.

See other alerts