Hustle – Email Marketing, Lead Generation, Optins, Popups vulnerabilities

Plugin slug wordpress-popup · 15 known vulnerabilities · latest disclosed 2026-10-30 · WordPress.org page

Every listed vulnerability has a fix. Version 7.8.14.4 or later is not affected by any of them. If your site runs an older version, update it.

3 of 15 rated high or critical (CVSS 7 or more).

Known vulnerabilities in Hustle – Email Marketing, Lead Generation, Optins, Popups

SeverityAffected versionsFixed inCVEPublishedDetails
Medium 4.3<= 7.8.14.37.8.14.4CVE-2026-1093862026-10-30Advisory
Medium 6.4<= 7.8.14.37.8.14.4CVE-2026-1077102026-10-27Advisory
Medium 4.9<= 7.8.14.37.8.14.4CVE-2026-1181692026-10-27Advisory
Medium 4.3<= 7.8.14.27.8.14.3CVE-2026-1030752026-10-07Advisory
Medium 6.5< 7.8.14.27.8.14.2CVE-2026-804402026-09-07Advisory
Medium 5.3<= 7.8.10.17.8.10.2CVE-2026-254312026-05-12Advisory
Medium 5.3<= 7.8.10.27.8.11CVE-2026-22632026-04-07Advisory
Medium 5.3<= 7.8.9.27.8.9.3CVE-2026-249982026-01-25Advisory
High 7.5<= 7.8.9.27.8.9.3CVE-2026-09112026-01-23Advisory
Medium 5.3<= 7.8.57.8.6CVE-2024-105802024-11-26Advisory
Medium 4.3<= 7.8.57.8.6CVE-2024-105792024-11-25Advisory
Medium 4.4<= 7.8.47.8.5CVE-2024-84922024-07-29Advisory
High 8.6<= 7.8.37.8.4CVE-2024-03682024-03-12Advisory
Medium 4.4<= 7.6.47.6.6none2023-04-06Advisory
High 7.8<= 6.0.76.0.8.1CVE-2019-118722019-05-24Advisory

Check if a site is affected

Enter a site address to see which version of Hustle – Email Marketing, Lead Generation, Optins, Popups and other plugins it runs, and whether they match a known vulnerability.

Questions

Is the Hustle – Email Marketing, Lead Generation, Optins, Popups plugin safe to use?

All 15 known issues are fixed in current versions (7.8.14.4 or later). Keeping it updated is what matters.

How do I check which version of Hustle – Email Marketing, Lead Generation, Optins, Popups my site runs?

In WordPress go to Plugins > Installed Plugins. From the outside, the free PluginPeek scan below reads the version from the site's public files.

How do I fix a vulnerable plugin?

Make a full backup, then update it from Dashboard > Updates and check the site afterwards. If you would rather not, we can do it for a fixed $99, paid after you have checked the site.

Check any WordPress site in one click while you browse: Add PluginPeek to Chrome