Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Vendor: Hive Support Clear all filters
TI-2025-04500 CVE-2025-5018 · GHSA-3hw7-239v-hfv6

Missing authorization in Hive Support | AI-Powered Help Desk, Live Chat and Chatbot

Priority LOW 31

The Hive Support plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the hs_update_ai_chat_settings() and hive_lite_support_get_all_binbox() functions i…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00337 Published 2025-06-06 No fix listed CWE-862
TI-2025-23700 CVE-2025-32635 · GHSA-r966-h552-5m23

WordPress Hive Support plugin <= 1.2.6 - Sensitive Data Exposure vulnerability

Priority LOW 39

Insertion of Sensitive Information Into Sent Data vulnerability in Hive Support Hive Support hive-support allows Retrieve Embedded Sensitive Data.This issue affects Hive Support: from n/a through <= 1.2.6.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0048 Published 2025-04-17 No fix listed CWE-201
TI-2025-23731 CVE-2025-32666 · GHSA-9rfc-8v8w-5p2c

WordPress Hive Support plugin <= 1.2.5 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hive Support Hive Support hive-support allows Reflected XSS.This issue affects Hive Support: from n/a through <= 1.2.5…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00293 Published 2025-04-17 No fix listed CWE-79
TI-2025-23339 CVE-2025-32242 · GHSA-5xfp-2339-j582

WordPress Hive Support plugin <= 1.2.5 - Broken Access Control vulnerability

Priority LOW 35

Missing Authorization vulnerability in Hive Support Hive Support hive-support allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Hive Support: from n/a through <= 1.2.5.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00299 Published 2025-04-10 No fix listed CWE-862
TI-2025-23311 CVE-2025-32214 · GHSA-32mq-5gxg-w4qc

WordPress Hive Support plugin <= 1.2.11 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hive Support Hive Support hive-support allows Stored XSS.This issue affects Hive Support: from n/a through <= 1.2.11.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00227 Published 2025-04-10 No fix listed CWE-79
TI-2025-23305 CVE-2025-32208 · GHSA-rg3m-w4gr-f838

WordPress Hive Support plugin <= 1.2.5 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in Hive Support Hive Support hive-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hive Support: from n/a through <= 1.2.5.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00344 Published 2025-04-10 No fix listed CWE-862
TI-2025-16202 CVE-2025-22298 · GHSA-j2mg-9wpw-gcm4

WordPress Hive Support plugin <= 1.1.6 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in Hive Support Hive Support hive-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hive Support: from n/a through <= 1.1.6.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00296 Published 2025-01-07 No fix listed CWE-862
TI-2024-36392 CVE-2024-54304 · GHSA-8w4w-f5fh-qf9q

WordPress Hive Support plugin <= 1.1.2 - SQL Injection vulnerability

Priority HIGH 70

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Hive Support Hive Support hive-support allows SQL Injection.This issue affects Hive Support: from n/a through <= 1.1.2…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00504 Published 2024-12-13 No fix listed CWE-89
TI-2024-35041 CVE-2024-52370 · GHSA-287j-5qww-5g5x

Unrestricted file upload in Hive Support

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in Hive Support Hive Support hive-support allows Upload a Web Shell to a Web Server.This issue affects Hive Support: from n/a through <= 1.1.1.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00492 Published 2024-11-14 No fix listed CWE-434