Now officially on WordPress.org

CVE Database / CVE-2026-57736

CVE · High

CVE-2026-57736 — HubSpot All-In-One Marketing – Forms, Popups, Live Chat [leadin] < 11.3.56

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-57736 HubSpot All-In-One Marketing – Forms, Popups, Live Chat [leadin] < 11.3.56 Insertion of Sensitive Information Into Sent Data High 7.4 < 11.3.56 11.3.56 2026-07-01 —

CVE-2026-57736

The HubSpot All-In-One Marketing plugin for WordPress contains a security flaw that allows authorized users with elevated privileges to obtain confidential information about users or the plugin's settings in all versions prior to 11.3.56. This vulnerability can be exploited by attackers who have gained access to the site at a level of Contributor or higher.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings