PT-2026-54891 · Hubspot · Hubspot

Jakub Herman · Published 2026-07-01 · Updated 2026-07-09 · CVE-2026-57736

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions HubSpot versions prior to 11.3.52

Description An issue involving the insertion of sensitive information into sent data allows for the retrieval of embedded sensitive data.

Recommendations Update to a version newer than 11.3.51.

Fix

Weakness Enumeration

CWE-201

Related Identifiers

CVE-2026-57736

Affected Products

Hubspot

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-57736 · Security Note
• https://t.me/CVEtracker/58597 · Telegram Post
• https://reddit.com/r/StopBadBots/comments/1us27zi/three_wordpress_powerhouses_just_busted_wide_open · Reddit Post
• https://reddit.com/r/StopBadBots/comments/1us1z36/wordpress_cyber_apocalypse_88_unpatched_flaws · Reddit Post
• https://patchstack.com/database/wordpress/plugin/leadin/vulnerability/wordpress-hubspot-plugin-11-3-51-sensitive-data-exposure-vulnerability?_s_id=cve · Note