Is Hubbub Lite safe?

Every recorded flaw

• Jul 23, 2026Hubbub Lite: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2026-27403 · affects up to 1.36.3 · reported by PatchstackMedium 6.5
• Nov 6, 2025Hubbub Lite – Fast, free social sharing and follow buttons: Reflected Cross-Site ScriptingCVE-2025-12471 · affects up to 1.36.0 · reported by WordfenceMedium 6.1
• Sep 22, 2025Hubbub Lite: Exposure of Sensitive System Information to an Unauthorized Control SphereCVE-2025-58007 · affects up to 1.35.2 · reported by PatchstackMedium 4.3
• May 15, 2025Hubbub Lite: Does not sanitise and escape some of its settingsCVE-2024-10145 · fixed in 1.34.4 · reported by WPScanMedium 4.8
• Dec 9, 2024Hubbub Lite: Missing AuthorizationCVE-2023-49193 · affects up to 1.30.0 · reported by PatchstackMedium 5.3
• Apr 9, 2024Hubbub Lite – Fast, Reliable Social Sharing Buttons: PHP Object InjectionCVE-2024-2501 · affects up to 1.33.1 · reported by WordfenceHigh 7.5
• Apr 1, 2024Hubbub Lite: Does not ensure that user have access to password protected post before displaying its content in a meta tagCVE-2024-1526 · fixed in 1.33.1 · reported by WPScanMedium 5.3

Records come from the National Vulnerability Database, published by the researchers who found each flaw (Wordfence, Patchstack, WPScan and others); exploited status from CISA; exploit odds from FIRST’s EPSS; current version, installs and closures from wordpress.org, checked daily. Want every plugin on your site checked at once? Run the free website check.