CVE Catalog
CVE-2026-73396
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk0.39%
32th percentile - higher than 32% of all known CVEs
Summary
Subscriber Broken Authentication vulnerability in MWB HubSpot for WooCommerce versions up to 1.6.7.
Risk Assessment
A user with subscriber role can gain unauthorized privileges, potentially leading to privilege escalation and security breach.
Recommendation
Update the MWB HubSpot for WooCommerce plugin to the latest version with security fix.
Original NVD description (English source)
Subscriber Broken Authentication in MWB HubSpot for WooCommerce <= 1.6.7 versions.