Read the docs

Property Hive

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Property Hive records in CISA KEV

No Property Hive vulnerabilities are listed in CISA KEV.

Records

9 records

TI-2025-22063 CVE-2025-30793 · GHSA-pmrv-wgvv-rj54

WordPress Houzez Property Feed plugin <= 2.5.4 - Arbitrary File Download Vulnerability

Priority MEDIUM 40

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Property Hive Houzez Property Feed houzez-property-feed allows Path Traversal.This issue affects Houzez Property Feed: from…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00612 Published 2025-04-01 No fix listed CWE-22
TI-2025-40613 CVE-2025-66088 · GHSA-c958-3983-v9mj

WordPress PropertyHive plugin <= 2.1.12 - Broken Access Control vulnerability

Priority LOW 38

Missing Authorization vulnerability in Property Hive PropertyHive propertyhive allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PropertyHive: from n/a through <= 2.1.12.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00268 Published 2025-12-18 No fix listed CWE-862
TI-2026-41318 CVE-2026-57381 · GHSA-526c-pgjq-rx5h

WordPress PropertyHive plugin <= 2.2.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Property Hive PropertyHive propertyhive allows Reflected XSS.This issue affects PropertyHive: from n/a through <= 2.2.…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-07-13 No fix listed CWE-79
TI-2026-30952 CVE-2026-42729 · GHSA-xv3p-m7qm-cgmg

WordPress PropertyHive plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Property Hive PropertyHive propertyhive allows DOM-Based XSS.This issue affects PropertyHive: from n/a through <= 2.2.…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00181 Published 2026-05-27 No fix listed CWE-79
TI-2025-26319 CVE-2025-39577 · GHSA-8f89-67pg-r2cq

WordPress PropertyHive plugin <= 2.1.2 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Property Hive PropertyHive propertyhive allows Stored XSS.This issue affects PropertyHive: from n/a through <= 2.1.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00324 Published 2025-04-16 No fix listed CWE-79
TI-2025-36280 CVE-2025-58612 · GHSA-f3hv-x265-h4gm

WordPress PropertyHive Plugin <= 2.1.5 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Property Hive PropertyHive propertyhive allows Stored XSS.This issue affects PropertyHive: from n/a through <= 2.1.5.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00209 Published 2025-09-03 No fix listed CWE-79
TI-2025-40612 CVE-2025-66087 · GHSA-w59g-xprj-7jw4

WordPress PropertyHive plugin <= 2.1.12 - Broken Access Control vulnerability

Priority LOW 19

Missing Authorization vulnerability in Property Hive PropertyHive propertyhive allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PropertyHive: from n/a through <= 2.1.12.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00188 Published 2025-11-21 No fix listed CWE-862
Open these records in search →