PT-2026-6243 · Wpmu Dev · Hustle

Published 2026-02-03 · Updated 2026-02-03 · CVE-2026-24998

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Hustle versions through 7.8.9.2

Description A flaw exists in the wordpress-popup component of WPMU DEV - Your All-in-One WordPress Platform Hustle that allows the retrieval of embedded sensitive data. This could lead to an exposure of sensitive system information to an unauthorized control sphere.

Recommendations Update Hustle to a version newer than 7.8.9.2.

Fix

Weakness Enumeration

CWE-497

Related Identifiers

CVE-2026-24998

Affected Products

Hustle

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-24998 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/wordpress-popup/vulnerability/wordpress-hustle-plugin-7-8-9-2-sensitive-data-exposure-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2018696370451071021 · Twitter Post
• https://t.me/CVEtracker/43601 · Telegram Post