Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
hivepress
WordPress
· Plugin
7 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
HivePress – Business Directory, Listings & Classified Ads Plugin <= 1.8.1 - Missing Authorization
CVE-2026-123470
hivepress
WordPress
Medium
Fix reported
2026-11-10
HivePress – Business Directory, Listings & Classified Ads Plugin <= 1.7.32 - Authenticated (Subscriber+) Arbitrary CSS Injection
CVE-2026-110885
hivepress
WordPress
Medium
Fix reported
2026-10-23
HivePress – Business Directory, Listings & Classified Ads Plugin <= 1.7.32 - Authenticated (Contributor+) Remote Code Execution
CVE-2026-110887
hivepress
WordPress
High
Fix reported
2026-10-23
HivePress <= 1.7.32 - Unauthenticated Stored Cross-Site Scripting via Custom User Attribute Value
CVE-2026-109193
hivepress
WordPress
High
Fix reported
2026-10-16
HivePress <= 1.7.32 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'message' Attribute of the hivepress_user_login_form Shortcode
CVE-2026-109388
hivepress
WordPress
Medium
Fix reported
2026-10-16
HivePress <= 1.7.31 - Unauthenticated Stored Cross-Site Scripting via Custom User Attribute Value via Registration Form
CVE-2026-107657
hivepress
WordPress
High
Fix reported
2026-10-10
HivePress <= 1.7.31 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Listing Attribute Value in Administrator-configured HTML Format
CVE-2026-103520
hivepress
WordPress
Medium
Fix reported
2026-10-10
