Broken Authentication Vulnerability in MWB HubSpot for WooCommerce by MakeWebBetter

CVE-2026-73396

What is CVE-2026-73396?

The MWB HubSpot for WooCommerce plugin is affected by a broken authentication vulnerability that could potentially allow unauthorized access to subscriber accounts. This weakness arises in versions 1.6.7 and lower, presenting an opportunity for attackers to exploit the flawed authentication mechanism, leading to a compromised user experience and potential data breaches. It is crucial for users to update to the latest version and implement proper security measures to mitigate any risks associated with this vulnerability.

References