Hubbub Lite – Fast, free social sharing and follow buttons

Vulnerabilities 13Slug social-pugLatest version 1.36.3WordPress.org →

Minimum safe version

1.36.1

Update to 1.36.1 or later to address 13 fixable vulnerabilities

Latest available1.36.3 ✓

Medium 4.3

2025-09-22< 1.36.0

Hubbub Lite <= 1.35.1 - Authenticated (Subscriber+) Sensitive Information Exposure

Wordfence EUVD CVE

Medium 6.1

2025-11-06< 1.36.1

CVE-2025-12471

CVE Wordfence

Medium 4.8

2025-05-17< 1.34.4

WordPress Social Pug Plugin < 1.34.4 is vulnerable to Cross Site Scripting (XSS)

Patchstack CVE EUVD Wordfence

Medium 5.3

2024-04-01< 1.33.1

CVE-2024-1526

CVE Wordfence Patchstack WPScan

High 7.5

2024-04-09< 1.33.2

CVE-2024-2501

CVE Wordfence Patchstack WPScan

Medium 4.8

2024-01-16< 1.32.0

CVE-2023-7154

CVE Wordfence WPScan

Medium 5.3

2024-12-09< 1.30.1

CVE-2023-49193

CVE Patchstack Wordfence WPScan

N/A

< 1.19.0

Grow Social < 1.19.0 - Reflected Cross-Site Scripting

WPScan

N/A

2023-12-09< 1.2.6

WordPress Social Pug Plugin <= 1.2.5 is vulnerable to Cross Site Scripting (XSS)

Patchstack

N/A

2021-07-08< 1.19.0

Grow Social <= 1.18.2 - Reflected Cross-Site Scripting

Wordfence

N/A

2022-06-13< 1.19.0

WordPress Grow Social plugin <= 1.18.2 - Reflected Cross-Site Scripting (XSS) vulnerability

Patchstack

N/A

2016-12-09< 1.2.6

WordPress Social Pug Plugin <= 1.2.5 - Cross Site Scripting

Patchstack

Medium 6.1

2019-01-09< 1.2.6

CVE-2016-10736

CVE Wordfence WPScan