Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
propertyhive
WordPress
· Plugin
21 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Property Hive <= 2.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2026-66578
propertyhive
WordPress
Medium
Fix reported
2026-09-22
Property Hive <= 2.2.3 - Unauthenticated Stored Cross-Site Scripting
CVE-2026-57381
propertyhive
WordPress
High
Fix reported
2026-07-14
Property Hive <= 2.2.2 - Unauthenticated Stored Cross-Site Scripting
CVE-2026-42729
propertyhive
WordPress
High
Fix reported
2026-05-26
PropertyHive <= 2.1.12 - Missing Authorization
CVE-2025-66088
propertyhive
WordPress
Medium
Fix reported
2025-12-20
PropertyHive <= 2.1.12 - Missing Authorization
CVE-2025-66087
propertyhive
WordPress
Medium
Fix reported
2025-12-01
PropertyHive <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-58612
propertyhive
WordPress
Medium
Fix reported
2025-09-10
PropertyHive <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-39577
propertyhive
WordPress
Medium
Fix reported
2025-04-22
Property Hive <= 2.1.0 - Reflected Cross-Site Scripting
CVE-2024-12585
propertyhive
WordPress
Medium
Fix reported
2025-01-20
PropertyHive <= 2.0.19 - Cross-Site Request Forgery via save_account_details
CVE-2024-8490
propertyhive
WordPress
High
Fix reported
2024-09-17
PropertyHive <= 2.0.9 - Missing Authorization
CVE-2024-37204
propertyhive
WordPress
Medium
Fix reported
2024-06-26
PropertyHive <= 2.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-35701
propertyhive
WordPress
Medium
Fix reported
2024-06-13
PropertyHive <= 2.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-34381
propertyhive
WordPress
Medium
Fix reported
2024-05-07
PropertyHive <= 2.0.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
CVE-2024-3607
propertyhive
WordPress
Medium
Fix reported
2024-05-02
PropertyHive <= 2.0.8 - Reflected Cross-Site Scripting
CVE-2024-29923
propertyhive
WordPress
Medium
Fix reported
2024-04-01
PropertyHive <= 2.0.9 - Authenticated (Subscriber+) PHP Object Injection
CVE-2024-27985
propertyhive
WordPress
High
Fix reported
2024-03-21
PropertyHive <= 2.0.6 - Missing Authorization via activate_pro_feature
CVE-2024-24718
propertyhive
WordPress
Medium
Fix reported
2024-02-05
PropertyHive <= 2.0.5 - Unauthenticated PHP Object Injection via propertyhive_currency
CVE-2024-23513
propertyhive
WordPress
High
Fix reported
2024-02-05
PropertyHive <= 1.5.48 - Reflected Cross-Site Scripting via date_post_id
CVE-2023-22706
propertyhive
WordPress
Medium
Fix reported
2024-01-22
PropertyHive <= 1.5.46 - Reflected Cross-Site Scripting via 'merge_ids'
CVE-2023-29172
propertyhive
WordPress
Medium
Fix reported
2024-01-22
PropertyHive < 1.4.15 - Cross-Site Scripting
CVE-2018-6465
propertyhive
WordPress
Medium
Fix reported
2024-01-22
Previous
1
2
Next