CVE-2026-24559: medium-severity vulnerability in CRM Perks Integration for Contact Form 7 HubSpot
WordPress Integration for Contact Form 7 HubSpot plugin <= 1.4.3 - Sensitive Data Exposure vulnerability
Published · Updated
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3epss 0.3%
exploitation probability
0.3%top 81% of all CVEs
observed exploitation
nono source reports it
Insertion of Sensitive Information Into Sent Data vulnerability in CRM Perks Integration for Contact Form 7 HubSpot cf7-hubspot allows Retrieve Embedded Sensitive Data.This issue affects Integration for Contact Form 7 HubSpot: from n/a through <= 1.4.3.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
CRM Perks · Integration for Contact Form 7 HubSpotRelated CVEs — CRM Perks Integration for Contact Form 7 HubSpot
In the same product, most dangerous first.
CVE-2026-49763CRITICALWordPress Integration for Contact Form 7 HubSpot plugin <= 1.3.7 - PHP Object Injection vulnerabilityEPSS 0.6%CVE-2025-68590HIGHWordPress Integration for Contact Form 7 HubSpot plugin <= 1.4.2 - SQL Injection vulnerabilityEPSS 0.3%CVE-2024-34756MEDIUMWordPress Integration for HubSpot and Contact Form 7 plugin <= 1.3.1 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%