HI
Vendor
hivepress
9
CVEs
0
On KEV
6
New 30D
Products
HB7.2
HivePress – Business Directory, Listings & Classified Ads Plugin
hivepress
4 CVEs0 on KEV4 new
HI9.9
HivePress
HivePress
2 CVEs0 on KEV2 new
HC4.3
HivePress Claim Listings
HivePress
2 CVEs0 on KEV0 new
HA7.5
HivePress Authentication
hivepress
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-110887 | HI HivePress HivePress | 9.9 | Oct 19 | WordPress HivePress plugin <= 1.7.32 - Remote Code Execution (RCE) vulnerability |
| CVE-2026-110885 | HI HivePress HivePress | 6.5 | Oct 18 | WordPress HivePress plugin <= 1.7.32 - Content Injection vulnerability |
| CVE-2026-109193 | HB HivePress – Business Directory, Listings & Classified Ads Plugin hivepress | 7.2 | Oct 16 | HivePress <= 1.7.32 - Unauthenticated Stored Cross-Site Scripting via Custom User Attribute Value |
| CVE-2026-109388 | HB HivePress – Business Directory, Listings & Classified Ads Plugin hivepress | 6.4 | Oct 16 | HivePress <= 1.7.32 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'message' Attribute of the hivepress_user_login_form Shortcode |
| CVE-2026-107657 | HB HivePress – Business Directory, Listings & Classified Ads Plugin hivepress | 7.2 | Oct 10 | HivePress <= 1.7.31 - Unauthenticated Stored Cross-Site Scripting via Custom User Attribute Value via Registration Form |
| CVE-2026-103520 | HB HivePress – Business Directory, Listings & Classified Ads Plugin hivepress | 6.4 | Oct 10 | HivePress <= 1.7.31 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Listing Attribute Value in Administrator-configured HTML Format |
| CVE-2026-18056 | HA HivePress Authentication hivepress | 7.5 | Sep 6 | HivePress Authentication <= 1.1.4 - Unauthenticated Authentication Bypass via 'access_token' Parameter to Facebook Authenticator |
| CVE-2025-60123 | HC HivePress Claim Listings HivePress | 4.3 | Sep 26 | WordPress HivePress Claim Listings plugin <= 1.1.3 - Broken Access Control vulnerability |
| CVE-2025-60122 | HC HivePress Claim Listings HivePress | 4.3 | Sep 26 | WordPress HivePress Claim Listings plugin <= 1.1.4 - Broken Access Control vulnerability |