CVE-2026-103075: Wpmu Dev Hustle

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Missing Authorization vulnerability in WPMU DEV Hustle wordpress-popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hustle: from n/a through 7.8.14.2.

Affected products

• Wpmu Dev Hustle: up to and including 7.8.14.2

Published 2026-10-07. Last modified 2026-10-07.