Sensitive Information Exposure in The Hustle Plugin

CVE-2024-0368

What is CVE-2024-0368?

The Hustle - Email Marketing, Lead Generation, Optins, Popups plugin for WordPress contains a vulnerability that results in Sensitive Information Exposure across all versions up to and including 7.8.3. This weakness arises from hardcoded API keys, which can be exploited by unauthenticated attackers. The exploitation allows access to sensitive data, including personally identifiable information (PII), posing significant risks to user privacy and data security. It is crucial for users of this plugin to review their configurations and apply the necessary updates to mitigate this risk.

References