Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Vendor: Property Hive Clear all filters
TI-2026-41318 CVE-2026-57381 · GHSA-526c-pgjq-rx5h

WordPress PropertyHive plugin <= 2.2.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Property Hive PropertyHive propertyhive allows Reflected XSS.This issue affects PropertyHive: from n/a through <= 2.2.…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-07-13 No fix listed CWE-79
TI-2026-30952 CVE-2026-42729 · GHSA-xv3p-m7qm-cgmg

WordPress PropertyHive plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Property Hive PropertyHive propertyhive allows DOM-Based XSS.This issue affects PropertyHive: from n/a through <= 2.2.…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00181 Published 2026-05-27 No fix listed CWE-79
TI-2025-40613 CVE-2025-66088 · GHSA-c958-3983-v9mj

WordPress PropertyHive plugin <= 2.1.12 - Broken Access Control vulnerability

Priority LOW 38

Missing Authorization vulnerability in Property Hive PropertyHive propertyhive allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PropertyHive: from n/a through <= 2.1.12.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00268 Published 2025-12-18 No fix listed CWE-862
TI-2025-40612 CVE-2025-66087 · GHSA-w59g-xprj-7jw4

WordPress PropertyHive plugin <= 2.1.12 - Broken Access Control vulnerability

Priority LOW 19

Missing Authorization vulnerability in Property Hive PropertyHive propertyhive allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PropertyHive: from n/a through <= 2.1.12.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00188 Published 2025-11-21 No fix listed CWE-862
TI-2025-36280 CVE-2025-58612 · GHSA-f3hv-x265-h4gm

WordPress PropertyHive Plugin <= 2.1.5 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Property Hive PropertyHive propertyhive allows Stored XSS.This issue affects PropertyHive: from n/a through <= 2.1.5.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00209 Published 2025-09-03 No fix listed CWE-79
TI-2025-26319 CVE-2025-39577 · GHSA-8f89-67pg-r2cq

WordPress PropertyHive plugin <= 2.1.2 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Property Hive PropertyHive propertyhive allows Stored XSS.This issue affects PropertyHive: from n/a through <= 2.1.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00324 Published 2025-04-16 No fix listed CWE-79
TI-2025-22063 CVE-2025-30793 · GHSA-pmrv-wgvv-rj54

WordPress Houzez Property Feed plugin <= 2.5.4 - Arbitrary File Download Vulnerability

Priority MEDIUM 40

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Property Hive Houzez Property Feed houzez-property-feed allows Path Traversal.This issue affects Houzez Property Feed: from…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00612 Published 2025-04-01 No fix listed CWE-22