HubSpot All-In-One Marketing – Forms, Popups, Live Chat — Vulnerabilities & Security Advisories 3

All 3 CVE vulnerabilities found in HubSpot All-In-One Marketing – Forms, Popups, Live Chat, with AI-generated Chinese analysis, references, and POCs.

Vendor: hubspotdev

CVE ID	Title	CVSS	Severity	Published
CVE-2026-9656	HubSpot All-In-One Marketing <= 11.3.62 - Authenticated (Contributor+) Sensitive Information Exposure via Block Editor Localized Script CWE-200	4.3	Medium	2026-07-17
CVE-2025-11762	HubSpot All-In-One Marketing - Forms, Popups, Live Chat <= 11.3.32 - Missing Authorization to Authenticated (Contributor+) Installed Plugin Disclosure CWE-862	4.3	Medium	2026-04-24
CVE-2024-5879	HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics <= 11.1.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via HubSpot Meeting Widget CWE-79	6.4	Medium	2024-08-30

All 3 known CVE vulnerabilities affecting HubSpot All-In-One Marketing – Forms, Popups, Live Chat with full Chinese analysis, references, and POCs where available.