Read the docs

Hive Support

Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Hive Support records in CISA KEV

No Hive Support vulnerabilities are listed in CISA KEV.

Records

11 records

TI-2024-36392 CVE-2024-54304 · GHSA-8w4w-f5fh-qf9q

WordPress Hive Support plugin <= 1.1.2 - SQL Injection vulnerability

Priority HIGH 70

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Hive Support Hive Support hive-support allows SQL Injection.This issue affects Hive Support: from n/a through <= 1.1.2…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00504 Published 2024-12-13 No fix listed CWE-89
TI-2024-35041 CVE-2024-52370 · GHSA-287j-5qww-5g5x

Unrestricted file upload in Hive Support

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in Hive Support Hive Support hive-support allows Upload a Web Shell to a Web Server.This issue affects Hive Support: from n/a through <= 1.1.1.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00492 Published 2024-11-14 No fix listed CWE-434
TI-2025-23700 CVE-2025-32635 · GHSA-r966-h552-5m23

WordPress Hive Support plugin <= 1.2.6 - Sensitive Data Exposure vulnerability

Priority LOW 39

Insertion of Sensitive Information Into Sent Data vulnerability in Hive Support Hive Support hive-support allows Retrieve Embedded Sensitive Data.This issue affects Hive Support: from n/a through <= 1.2.6.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0048 Published 2025-04-17 No fix listed CWE-201
TI-2025-23339 CVE-2025-32242 · GHSA-5xfp-2339-j582

WordPress Hive Support plugin <= 1.2.5 - Broken Access Control vulnerability

Priority LOW 35

Missing Authorization vulnerability in Hive Support Hive Support hive-support allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Hive Support: from n/a through <= 1.2.5.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00299 Published 2025-04-10 No fix listed CWE-862
TI-2025-23731 CVE-2025-32666 · GHSA-9rfc-8v8w-5p2c

WordPress Hive Support plugin <= 1.2.5 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hive Support Hive Support hive-support allows Reflected XSS.This issue affects Hive Support: from n/a through <= 1.2.5…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00293 Published 2025-04-17 No fix listed CWE-79
TI-2025-04500 CVE-2025-5018 · GHSA-3hw7-239v-hfv6

Missing authorization in Hive Support | AI-Powered Help Desk, Live Chat and Chatbot

Priority LOW 31

The Hive Support plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the hs_update_ai_chat_settings() and hive_lite_support_get_all_binbox() functions i…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00337 Published 2025-06-06 No fix listed CWE-862
TI-2025-23305 CVE-2025-32208 · GHSA-rg3m-w4gr-f838

WordPress Hive Support plugin <= 1.2.5 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in Hive Support Hive Support hive-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hive Support: from n/a through <= 1.2.5.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00344 Published 2025-04-10 No fix listed CWE-862
TI-2025-23311 CVE-2025-32214 · GHSA-32mq-5gxg-w4qc

WordPress Hive Support plugin <= 1.2.11 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hive Support Hive Support hive-support allows Stored XSS.This issue affects Hive Support: from n/a through <= 1.2.11.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00227 Published 2025-04-10 No fix listed CWE-79
TI-2025-16202 CVE-2025-22298 · GHSA-j2mg-9wpw-gcm4

WordPress Hive Support plugin <= 1.1.6 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in Hive Support Hive Support hive-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hive Support: from n/a through <= 1.1.6.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00296 Published 2025-01-07 No fix listed CWE-862
Open these records in search →