HubSpot
- Aliases / services
- HubSpot / HubSpot Inc. / HubSpot All-in-one WordPress Plugin / hubspot.com
- Official website
- https://www.hubspot.com/
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
HubSpot platform
- Response status
- Infrastructure unaffected
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
Cloud CRM and marketing platform.
The Trust Center says HubSpot infrastructure does not use PHP, with no known platform impact.
Scope: PHP on external WordPress hosts is separate; July's unrelated plugin vulnerability is not this incident.
What users should do
No customer action for HubSpot infrastructure is specified.
Official service URL
Source URLs
- HubSpot PHP2Shell updateshttps://trust.hubspot.com/Response evidence
HubSpot All-in-One WordPress plugin
- Response status
- No plugin patch; check host PHP
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
The October 23 addition says no plugin-specific fix is needed, but the hosting PHP runtime must be patched.
Scope: HubSpot infrastructure clearance does not cover the WordPress host; July's separate plugin CVE is unrelated.
What users should do
Confirm patched PHP with your hosting provider or server administrator.
Source URLs
- HubSpot PHP2Shell updateshttps://trust.hubspot.com/Response evidence
Related official sources
- HubSpot PHP2Shell updatesOfficial notice
Comments