SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-73396

HIGH · CVSS 7.1 EPSS 0.39%

Source: NVD + CISA KEV + EPSS · Published 2026-08-18 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The vulnerability affects the MWB HubSpot for WooCommerce plugin versions 1.6.7 and earlier, allowing attackers to exploit broken authentication mechanisms. This could lead to unauthorized access to subscriber accounts, potentially compromising sensitive customer data. E-commerce businesses using this plugin should prioritize immediate updates to mitigate the risk of exploitation.

CVE
CVE-2026-73396
Severity
HIGH
CVSS
7.1
EPSS
0.39%

Original NVD Description

Subscriber Broken Authentication in MWB HubSpot for WooCommerce <= 1.6.7 versions.