CVE-2025-58007: Nerdpress Hubbub Lite

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NerdPress Hubbub Lite social-pug allows Retrieve Embedded Sensitive Data.This issue affects Hubbub Lite: from n/a through <= 1.35.2.

Affected products

• Nerdpress Hubbub Lite: up to and including 1.35.2

Published 2025-09-22. Last modified 2026-06-17.