Skip to content
Hivepress vulnerabilities
Newest
-
hivepress
WordPress HivePress plugin <= 1.8.1 - Broken Access Control vulnerability
CVE-2026-123470
4.3 Medium
-
hivepress claim listings
WordPress HivePress Claim Listings plugin <= 1.1.4 - Broken Access Control vulnerability
CVE-2026-42707
4.3 Medium
-
hivepress
WordPress HivePress plugin <= 1.7.32 - Remote Code Execution (RCE) vulnerability
CVE-2026-110887
9.9 Critical
-
hivepress
WordPress HivePress plugin <= 1.7.32 - Content Injection vulnerability
CVE-2026-110885
6.5 Medium
-
hivepress – business directory, listings & classified ads plugin
HivePress <= 1.7.32 - Unauthenticated Stored Cross-Site Scripting via Custom User Attribute Value
CVE-2026-109193
7.2 High
-
hivepress – business directory, listings & classified ads plugin
HivePress <= 1.7.32 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'message' Attribute of the hivepress_user_login_form Shortcode
CVE-2026-109388
6.4 Medium
-
hivepress – business directory, listings & classified ads plugin
HivePress <= 1.7.31 - Unauthenticated Stored Cross-Site Scripting via Custom User Attribute Value via Registration Form
CVE-2026-107657
7.2 High
-
hivepress – business directory, listings & classified ads plugin
HivePress <= 1.7.31 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Listing Attribute Value in Administrator-configured HTML Format
CVE-2026-103520
6.4 Medium
-
hivepress authentication
HivePress Authentication <= 1.1.4 - Unauthenticated Authentication Bypass via 'access_token' Parameter to Facebook Authenticator
CVE-2026-18056
7.5 High
-
hivepress claim listings
WordPress HivePress Claim Listings plugin <= 1.1.3 - Broken Access Control vulnerability
CVE-2025-60123
4.3 Medium
-
hivepress claim listings
WordPress HivePress Claim Listings plugin <= 1.1.4 - Broken Access Control vulnerability
CVE-2025-60122
4.3 Medium