Read the docs

HivePress

Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

HivePress records in CISA KEV

No HivePress vulnerabilities are listed in CISA KEV.

Records

11 records

TI-2026-76304 CVE-2026-110887 · GHSA-6536-vr78-8v3q

HivePress WordPress plugin remote code execution (RCE) vulnerability

Priority MEDIUM 43

Improper Control of Generation of Code ('Code Injection') vulnerability in HivePress HivePress hivepress allows Remote Code Inclusion.This issue affects HivePress: from n/a through 1.7.32.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00352 Published 2026-10-19 No fix listed CWE-94
TI-2026-14866 CVE-2026-18056 · GHSA-55w6-5hh5-wj3r

Improper authentication in HivePress Authentication

Priority LOW 36

The HivePress Authentication plugin for WordPress is vulnerable to Authentication Bypass via the access_token parameter in all versions up to, and including, 1.1.4.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00572 Published 2026-09-06 No fix listed CWE-287
TI-2026-86529 CVE-2026-123470 · GHSA-g44p-9wj8-wr76

Missing authorization in HivePress WordPress plugin

Priority LOW 35

Missing Authorization vulnerability in HivePress HivePress hivepress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HivePress: from n/a through 1.8.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS — Published 2026-11-07 No fix listed CWE-862
TI-2026-75264 CVE-2026-109193 · GHSA-p43f-8m2p-4mww

Stored cross-site scripting in HivePress via custom user attributes

Priority LOW 32

The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '<custom user attribute slug> (e.g.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00362 Published 2026-10-16 No fix listed CWE-79
TI-2026-70282 CVE-2026-107657 · GHSA-334w-8qrq-p7jf

Stored cross-site scripting in HivePress plugin for WordPress

Priority LOW 31

The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '<custom user attribute field name, e.g.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00246 Published 2026-10-10 No fix listed CWE-79
TI-2026-76059 CVE-2026-110885 · GHSA-m58g-g98h-p79w

Code injection in WordPress HivePress plugin

Priority LOW 29

Improper Control of Generation of Code ('Code Injection') vulnerability in HivePress HivePress hivepress allows Code Injection.This issue affects HivePress: from n/a through 1.7.32.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00333 Published 2026-10-18 No fix listed CWE-94
TI-2026-75267 CVE-2026-109388 · GHSA-8w67-xhw6-gqxx

Stored cross-site scripting in HivePress plugin for WordPress

Priority LOW 28

The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'message' parameter in all versions up to, and including, 1.7.32 due to insuf…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00248 Published 2026-10-16 No fix listed CWE-79
TI-2026-70237 CVE-2026-103520 · GHSA-82fv-q4vm-rv8c

Stored cross-site scripting in HivePress plugin listing attributes

Priority LOW 28

The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom text attribute (user-defined field name)' parameter in all versions u…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00195 Published 2026-10-10 No fix listed CWE-79
TI-2025-37489 CVE-2025-60123 · GHSA-4vw7-fjrf-474c

WordPress HivePress Claim Listings plugin <= 1.1.3 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in HivePress HivePress Claim Listings hivepress-claim-listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HivePress Claim Listings: from…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00241 Published 2025-09-26 No fix listed CWE-862
TI-2025-37488 CVE-2025-60122 · GHSA-r729-vqr4-97mm

WordPress HivePress Claim Listings plugin <= 1.1.4 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in HivePress HivePress Claim Listings hivepress-claim-listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HivePress Claim Listings: from…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00241 Published 2025-09-26 No fix listed CWE-862
TI-2026-82396 CVE-2026-42707 · GHSA-qv29-fw58-hwxq

WordPress HivePress Claim Listings plugin: Broken Access Control

Priority LOW 19

Missing Authorization vulnerability in HivePress HivePress Claim Listings hivepress-claim-listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HivePress Claim Listings: from…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00198 Published 2026-10-29 No fix listed CWE-862
Open these records in search →